9.3

CVE-2014-4461

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version <= 8.1
Apple ≫ iPhone OS Version8.0
Apple ≫ iPhone OS Version8.0.1
Apple ≫ iPhone OS Version8.0.2
Apple ≫ macOS X Version <= 10.10.1
Apple ≫ macOS X Version10.8.5
Apple ≫ macOS X Version10.9.5
Apple ≫ macOS X Version10.10.0
Apple ≫ tvOS Version <= 7.0.1
Apple ≫ tvOS Version6.0
Apple ≫ tvOS Version6.0.1
Apple ≫ tvOS Version6.0.2
Apple ≫ tvOS Version6.1
Apple ≫ tvOS Version6.1.1
Apple ≫ tvOS Version6.1.2
Apple ≫ tvOS Version6.2
Apple ≫ tvOS Version6.2.1
Apple ≫ tvOS Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.86% 0.821
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.