CVE-2015-7047

EPSS 1.0%

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.

Affected products

n/a · n/a

public PoCs found — 9

cve_referencewww.exploit-db.com/exploits/39371/unverified cve_referencewww.exploit-db.com/exploits/39373/unverified cve_referencewww.exploit-db.com/exploits/39374/unverified cve_referencewww.exploit-db.com/exploits/39375/unverified exploitdbwww.exploit-db.com/exploits/39377unverified exploitdbwww.exploit-db.com/exploits/39371unverified exploitdbwww.exploit-db.com/exploits/39375unverified exploitdbwww.exploit-db.com/exploits/39374unverified exploitdbwww.exploit-db.com/exploits/39373unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html https://support.apple.com/HT205635 https://support.apple.com/HT205637 https://support.apple.com/HT205640 https://support.apple.com/HT205641 https://www.exploit-db.com/exploits/39371/https://www.exploit-db.com/exploits/39373/https://www.exploit-db.com/exploits/39374/https://www.exploit-db.com/exploits/39375/