VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 11, 2015· Updated May 6, 2026

CVE-2015-7001

CVE-2015-7001

Description

AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <=9.1
  • Apple Inc./Mac OS X
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
    Range: <=10.11.1
  • Apple Inc./tvOS2 versions
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <=9.0
    • (no CPE)range: <9.1
  • Apple Inc./watchOS2 versions
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <=2.0
    • (no CPE)range: <2.1
  • Apple Inc./iOSllm-fuzzy
    Range: <9.2
  • Apple Inc./OS Xllm-fuzzy
    Range: <10.11.2

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

10

News mentions

0

No linked articles in our index yet.