Firetruck

CVE-2015-1130

KEV

Apple OS X Authentication Bypass Vulnerability

View CVE record →
Vendor / Project
Apple
Product
OS X
Date added
Feb 10, 2022
Due date
Aug 10, 2022
Known ransomware use
Unknown
CWEs
CWE-254

Description

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.

Required action

Apply updates per vendor instructions.

Notes