CVE-2015-7024: Apple Mac OS X

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature.

Affected products

• Apple Mac OS X: up to and including 10.11.0

Published 2016-01-11. Last modified 2026-06-17.