CVE-2014-8838

The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attackers to bypass the…

published January 30, 2015

CVSS
—
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attackers to bypass the Gatekeeper protection mechanism by leveraging access to a revoked Developer ID certificate for signing a crafted app.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00854 · 57.9th percentile
Published
2015-01-30T11:00Z
EPSS history
Timeline
  • 30 JAN 11:00Z
    The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attackers to bypass the…
    cvelistv5