CVE-2015-5945
HighSummary
The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update the system to version 10.11.1 or later to mitigate this vulnerability.
Other vulnerabilities in Apple OS X
See all- CVE-2016-4647High
Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-4641High
The Login Window in Apple OS X before version 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a 'type confusion.'
- CVE-2016-4640High
The Login Window in Apple OS X before version 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
- CVE-2016-4639High
The Login Window in Apple OS X before 10.11.6 does not properly initialize memory, allowing local users to cause a denial of service via unspecified vectors.
- CVE-2016-4638High
The Login Window in Apple OS X before version 10.11.6 allows attackers to gain privileges via a crafted app that leverages a 'type confusion.'
- CVE-2015-7052High
Kext tools in Apple OS X before 10.11.2 mishandle kernel-extension loading, allowing local users to gain privileges via unspecified vectors.
- CVE-2015-7044High
The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, allowing attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.
- CVE-2015-3775High
Apple OS X before 10.10.5 does not properly implement authentication, allowing local users to obtain admin privileges via unspecified vectors.
- CVE-2015-3767High
A vulnerability in Apple OS X before version 10.10.5 allows local users to gain privileges or cause a denial of service through a malformed DMG image.
- CVE-2014-8828High
A vulnerability in Apple OS X before version 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in a path.
Original NVD description (English source)
The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.