Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Apple macOS and watchOS using old ICU may be exploitable

CVE-2015-5922 · published 11 years ago
Summary

Versions of macOS prior to 10.11 and watchOS before 2 include an old version of the International Components for Unicode library (ICU) older than 53.1.0. This older library could allow attackers to exploit the system in ways that are not yet fully understood. Update the operating system to the latest version, which includes a newer, safer ICU library, or apply any available security patches.

What to do
  • Update apple mac_os_x to version 10.11 or later.
  • Update icu-project international_components_for_unicode to version 53.1 or later.
Affected software
VendorProductAffected versions
apple mac_os_x < 10.11
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
apple watchos <= 1.01
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
icu-project international_components_for_unicode < 53.1
cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\/c\+\+:*:*
Original advisory text
Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.
Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published9 Oct 2015
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2015-5922 · NVD
Track software like this
Free during beta