Apple OS X Authentication Bypass Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2015-1130 · Published 10/04/2015 · updated 17/06/2026

Apple OS X Authentication Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/02/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
OS X Apple	Versions not published yet (product named by CISA KEV)

Description

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

References

lists.apple.com/archives/security-announce/2015/Apr/msg00001.html · Broken Link
osvdb.org/120418 · Broken Link
securityfocus.com/bid/73982 · Broken Link
securitytracker.com/id/1032048 · Broken Link
support.apple.com/HT204659 · Vendor Advisory
exploit-db.com/exploits/36692 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2015-1130

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free