Description
An issue was discovered in certain Apple products. iCloud before 6.0.1 is affected. The issue involves the setup subsystem in the "iCloud" component. It allows local users to gain privileges via a crafted dynamic library in an unspecified directory.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207273
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94570
Scores
CVSS v3
7.8
EPSS
0.0028
EPSS Percentile
20.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-264
Status
published
Products (1)
apple/icloud
< 6.0.0
Published
Feb 20, 2017
Tracked Since
Feb 18, 2026