CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2015-11307.8/HIGHEPSS 9.9%CISA KEV

2015-04-10

Apple OS X Admin Framework XPC Authentication Bypass Local Privilege Escalation (CVE-2015-1130)

[Affected Scope] Apple Mac systems running OS X versions prior to 10.10.3

[Impact] Local users can completely bypass authentication mechanisms and elevate privileges to root/administrator

[Mitigation] Immediately upgrade OS X to version 10.10.3 or apply the latest security patches