CVE-2017-13838
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Sandbox' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Risk Assessment
This vulnerability could lead to serious security breaches, allowing attackers to gain access to the system with administrator privileges or disrupt system functionality.
Recommendation
It is recommended to update macOS to version 10.13.1 or later to mitigate this vulnerability.
Other vulnerabilities in Sandbox
See all- CVE-2017-2512High
An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Sandbox' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.
- CVE-2026-79218High
Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.