Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2014-8835 — Apple OS X Yosemite V10.10.2 AND Security Update 2015-001 vulnerability

CWE-195 documents5 sources
Severity
9.3CRITICALNVD
OSV4.3
EPSS
35.4%
top 2.93%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
Php5Apple OS X Yosemite V10.10.2 AND Security Update 2015-001Apple MAC OS X
Timeline
PublishedJan 30
Latest updateMay 17

Description

The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDapple/mac_os_x10.10.0, 10.10.1+1
▶Ubuntuphp5/php5< 5.5.9+dfsg-1ubuntu4.16

🔴Vulnerability Details

2
GHSA
GHSA-m5mx-j3w4-7q93: The xpc_data_get_bytes function in libxpc in Apple OS X before 10↗2022-05-17
▶
OSV
php5 vulnerabilities↗2016-04-21
▶

💥Exploits & PoCs

1
Exploit-DB
Apple Mac OSX 10.9.x - sysmond XPC Privilege Escalation↗2015-01-10
▶

📋Vendor Advisories

1
Apple
CVE-2014-8835: OS X Yosemite v10.10.2 and Security Update 2015-001↗
▶