vulnerability

OS X update for EFI (CVE-2014-4860)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Jul 4, 2017
Added
Jul 4, 2017
Modified
Aug 13, 2025

Description

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.

Solutions

apple-osx-security-update-2015-004-yosemiteapple-osx-security-update-2015-007-mavericksapple-osx-upgrade-10_11_1

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today