CVE-2015-1117

The (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted app.

• CWE-264

• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
• http://www.securitytracker.com/id/1032048
• https://support.apple.com/HT204659Vendor Advisory
• https://support.apple.com/HT204661Vendor Advisory
• https://support.apple.com/HT204662Vendor Advisory
• https://support.apple.com/kb/HT204870
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
• http://www.securitytracker.com/id/1032048
• https://support.apple.com/HT204659Vendor Advisory
• https://support.apple.com/HT204661Vendor Advisory
• https://support.apple.com/HT204662Vendor Advisory
• https://support.apple.com/kb/HT204870

Published

Apr 10, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1111Safari in Apple iOS before 8.3 does not delete Recently Clos…
• CVE-2015-1112Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before …
• CVE-2015-1113The Sandbox Profiles component in Apple iOS before 8.3 allow…
• CVE-2015-1114The Sandbox Profiles component in Apple iOS before 8.3 and A…
• CVE-2015-1115The Telephony component in Apple iOS before 8.3 allows attac…
• CVE-2015-1116The UIKit View component in Apple iOS before 8.3 displays un…
• CVE-2015-1118libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.…
• CVE-2015-1119WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2…
• CVE-2015-1120WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2…
• CVE-2015-1121WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2…
• CVE-2015-1122WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2…
• CVE-2015-1123WebKit, as used in Apple iOS before 8.3 and Apple TV before …