Apple · OS X
CVE-2015-1130
Apple OS X Authentication Bypass Vulnerability
Exploited in attacks
High 7.8 Attack chance: 9.9%
What it is
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
CISA: The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: August 10, 2022
More exploited flaws from Apple
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Feb 10, 2022 | Heap-Based Buffer Overflow | OS X | High 7.8 | 49% |
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
| Mar 20, 2026 | Classic Buffer Overflow | Multiple Products | Medium 5.5 | 0.4% |
| Mar 5, 2026 | Integer Overflow or Wraparound | Multiple Products | High 8.8 | 7.0% |
| Mar 5, 2026 | Use-After-Free | iOS and iPadOS | High 7.8 | 2.0% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.