CVE-2015-6974

IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause…

published October 23, 2015

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

⚠️ A cleverly crafted app can exploit iOS and OS X systems up to version 10.11.1, opening the door to arbitrary code execution! 🛡️ Think of this like a sneaky delivery person who mislabels packages to get into a secure area — once they’re in, they can do just about anything! 🏷️ An attacker can potentially run their own code with system privileges, which means they could access sensitive data or even crash the system entirely. This can lead to a frustrating denial of service or worse, unauthorized control of the device!

Put simply

Think of this like a sneaky delivery person who mislabels packages to get into a secure area — once they’re in, they can do just about anything! 🏷️ This vulnerability in IOHIDFamily allows code execution through a crafted application, leveraging memory corruption to gain privileges that should be restricted.

What to do

An attacker can potentially run their own code with system privileges, which means they could access sensitive data or even crash the system entirely. This can lead to a frustrating denial of service or worse, unauthorized control of the device! Make sure to update your iOS devices to version 9.1, OS X to 10.11.1, and watchOS to 2.0.1 or later. Regularly check and apply security updates to keep your systems safe! You’ve got this! Stay updated and keep your devices secure! 🔒

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02816 · 86.4th percentile
Published
2015-10-23T21:00Z
EPSS history
Timeline
  • 23 OCT 21:00Z
    IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause…
    cvelistv5