CVE-2015-7001: Medium severity apple ios, ipados, and watchos vulnerability
AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7001?
CVE-2015-7001 has a high severity rating due to the potential for unauthorized access to user contacts.
How do I fix CVE-2015-7001?
To fix CVE-2015-7001, update your affected Apple device to the latest version available prior to the specified vulnerabilities.
Which Apple operating systems are affected by CVE-2015-7001?
CVE-2015-7001 affects iOS versions prior to 9.2, OS X versions prior to 10.11.2, tvOS versions prior to 9.1, and watchOS versions prior to 2.1.
What type of attack does CVE-2015-7001 facilitate?
CVE-2015-7001 allows attackers to bypass Contacts access revocation, potentially exposing sensitive contact information.
Can CVE-2015-7001 impact all Apple devices?
No, CVE-2015-7001 specifically impacts certain versions of iOS, macOS, tvOS, and watchOS, not all Apple devices.