CVE-2015-3693: Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set ref...

Security readout for executives and security teams

CVE-2015-3693 is a 2015 Apple Mac EFI firmware issue tied to DDR3 memory refresh settings. On affected systems, the weakness could make Rowhammer-style memory corruption easier, potentially enabling privilege gain or denial of service. The bundle does not show active exploitation or a CVSS score. Exposure is most likely on legacy Apple Mac systems with EFI earlier than Mac EFI Security Update 2015-001 and OS X before 10.10.4. The bundle also says “other products,” but does not identify them, so affected inventory cannot be fully determined from these sources alone. Prioritize this where older Apple Mac systems remain in production, especially in privileged user, developer, or kiosk roles. It is not presented as an active exploitation emergency in the bundle, but unresolved firmware exposure can outlive normal OS patch cycles. Mitigation focus: Verify Apple Mac EFI Security Update 2015-001 applicability using Apple guidance.; Update affected OS X systems to 10.10.4 or later where supported.; Retire or isolate unsupported legacy Macs that cannot receive firmware updates..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.