CVE-2017-2512
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Sandbox' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.
Risk Assessment
Organizations may be exposed to attacks that could lead to unauthorized access to the system or disruption of its operation. If exploited, this vulnerability could allow an attacker to access sensitive data or cause system failure.
Recommendation
It is recommended to update macOS to version 10.12.5 or later to mitigate the risk associated with this vulnerability. Additionally, monitoring and restricting the installation of applications from untrusted sources is advisable.
Other vulnerabilities in Sandbox
See all- CVE-2017-13838High
An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Sandbox' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2026-79218High
Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Sandbox" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.