CVEvulnerability

CVE-2015-5945

7.2 HIGH Published 2015-10-23 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-10-23
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-20, CWE-264

Description

The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.

Affected configurations

• apple mac os x (<= 10.11.0)

Related

Weakness · not in database (1)

CWE-264

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html Vendor Advisory
https://support.apple.com/HT205375 Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html Vendor Advisory
https://support.apple.com/HT205375 Vendor Advisory