CVE Daily

CVE-2014-4457

The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly imple...

High CVSS 7.5

Overview

The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, which allows attackers to bypass intended binary-execution restrictions via a crafted application that is run during a time period when debugging is not enabled.

CWE: CWE-264 Published: 2014-11-18T11:59:04.903
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags