CVE-2011-1516

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-11-15 · updated 2026-06-16
Weakness: CWE-264

Description

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.

Affected products

macOS: 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5 (+15)

References

http://www.coresecurity.com/content/apple-osx-sandbox-bypass
http://www.securityfocus.com/archive/1/520479/100/100/threaded
http://www.coresecurity.com/content/apple-osx-sandbox-bypass
http://www.securityfocus.com/archive/1/520479/100/100/threaded

Get alerted when CVE-2011-1516 or the next vulnerability affects your stack