VULNERABILITY INTELLIGENCE

CVE-2015-7016

CVSS score7.6 HIGH
EPSS probability1.38%
CISA KEVNot currently listed
Published2015-10-23
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app.

Primary references