CVE-2015-1130

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Apr 10, 2015
Updated: Dec 19, 2024
CWE ID 254

Summary

CVE-2015-1130 is a vulnerability affecting the XPC implementation in Admin Framework on Apple OS X versions prior to 10.10.3. This issue permits local users to circumvent authentication, granting them admin privileges through unspecified means. Successful exploitation could lead to significant security consequences, including unauthorized system modifications and data theft. Users are advised to update their OS X installation to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apple Mac Os X
  • MacOS

Affected Vendors

  • Apple

Advisories, Assessments, and Mitigations