CVE-2015-7024 — Apple MAC OS X vulnerability

3 documents3 sources
Severity
6.7MEDIUMNVD
EPSS
0.0%
top 87.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple OS X EL Capitan 10.11.1 Security Update 2015-004 Yosemite AND Security Update 20
Timeline
PublishedJan 11
Latest updateMay 17

Description

Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶NVDapple/mac_os_x10.11.0

🔴Vulnerability Details

1
GHSA
GHSA-q45w-gwrf-j3jq: Untrusted search path vulnerability in Apple OS X before 10↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2015-7024: OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks↗
▶