Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2014-8826 — Apple MAC OS X vulnerability

CWE-194 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
14.0%
top 5.65%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Apple MAC OS XApple OS X Yosemite V10.10.2 AND Security Update 2015-001
Timeline
PublishedJan 30
Latest updateMay 13

Description

LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/mac_os_x10.10.1

🔴Vulnerability Details

1
GHSA
GHSA-q3xj-vhg2-m3v9: LaunchServices in Apple OS X before 10↗2022-05-13
▶

💥Exploits & PoCs

1
Exploit-DB
Apple Mac OSX < 10.10.x - GateKeeper Bypass↗2015-01-29
▶

📋Vendor Advisories

1
Apple
CVE-2014-8826: OS X Yosemite v10.10.2 and Security Update 2015-001↗
▶