CVE-2015-3805: Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechan...

Security readout for executives and security teams

Apple patched a local code-signing protection bypass in iOS and OS X in August 2015. The issue required local user access and a crafted Mach-O file. The provided sources do not show remote exploitation or active exploitation. Business concern is mainly unmanaged legacy Apple devices still running unsupported versions. Exposure is likely limited to legacy Apple endpoints running iOS versions before 8.4.1 or OS X versions before 10.10.5. Organizations with modern managed Apple fleets are unlikely to be exposed, but inventories should confirm no old or unsupported devices remain in service. Treat this as a legacy hygiene issue unless the business still runs affected Apple versions. Priority should rise if unsupported devices access sensitive systems, because local code-signing bypasses can weaken endpoint trust after initial access. Mitigation focus: Upgrade affected iOS devices to 8.4.1 or later where supported.; Upgrade affected OS X systems to 10.10.5 or later where supported.; Retire or isolate devices that cannot receive Apple security updates..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.