VULNERABILITY INTELLIGENCE

CVE-2015-5897

CVSS score4.6 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2015-10-09
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment variable to inject code into processes that rely on this framework.

Primary references