CVE-2017-2535
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.12.5, in the 'Security' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service via a crafted app.
Risk Assessment
Organizations may be exposed to attacks that could lead to unauthorized access to the system or resource exhaustion, impacting service availability.
Recommendation
It is recommended to update macOS to version 10.12.5 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Security
See all- CVE-2017-7080High
An issue was discovered in certain Apple products affecting iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4. The issue involves the 'Security' component and allows remote attackers to bypass intended certificate-trust restrictions via a revoked X.509 certificate.
- CVE-2017-2498High
An issue was discovered in certain Apple products, including iOS before 10.3.2, related to the 'Security' component. It allows attackers to bypass intended access restrictions via an untrusted certificate.
- CVE-2017-2485High
An issue was discovered in certain Apple products related to the 'Security' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted X.509 certificate file.
- CVE-2017-2451High
An issue was discovered in certain Apple products affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue involves the 'Security' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
- CVE-2016-7662High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Security' component, allowing remote attackers to spoof certificates via unspecified vectors.
- CVE-2017-2423Critical
An issue was discovered in certain Apple products affecting iOS before 10.3 and macOS before 10.12.4. The issue involves the 'Security' component and allows remote attackers to bypass intended access restrictions.
- CVE-2026-46851High
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle, affecting the security component. It allows an unauthenticated attacker with network access via HTTP to take control of the system.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Security" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (resource consumption) via a crafted app.