CVE-2015-7001

No fix known EPSS 2%

AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app.

Published 2015-12-11 · CVE record · OSV

Products: apple watchos, apple iphone_os, apple tvos, apple mac_os_x