Apple OS X Authentication Bypass Vulnerability

ALTO 7.8EXPLOITED (CISA KEV)CVE-2015-1130 · Published 10/04/2015 · updated 17/06/2026

Apple OS X Authentication Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/02/2022. Patch affected systems as an emergency.

En resumen

CVE-2015-1130 es una vulnerabilidad ALTO (CVSS 7.8).
Explotada activamente: CISA la añadió al catálogo KEV el 10/02/2022.
Probabilidad de explotación en los próximos 30 días (EPSS): 9.9%, mayor que el 95.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
OS X Apple	Versions not published yet (product named by CISA KEV)

Description

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

References

lists.apple.com/archives/security-announce/2015/Apr/msg00001.html · Broken Link
osvdb.org/120418 · Broken Link
securityfocus.com/bid/73982 · Broken Link
securitytracker.com/id/1032048 · Broken Link
support.apple.com/HT204659 · Vendor Advisory
exploit-db.com/exploits/36692 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2015-1130

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free