Actively exploited · Published Apr 10, 2015 · Assigned by apple

CVE-2015-1130

High 7.8 Exploited

In plain English

A high-severity security flaw in OS X from Apple. Attackers are actively exploiting it in the wild (listed by CISA on February 10, 2022). The chance it is exploited in the next 30 days is estimated at 9.9% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)9.9%top 4.4% of all CVEs

Exploited in the wildYesCISA KEV since Feb 10, 2022

Attack tooling2Metasploit, Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Aug 10, 2022.

Official description

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://support.apple.com/HT204659 x_refsource_CONFIRM
73982 vdb-entry, x_refsource_BID
120418 vdb-entry, x_refsource_OSVDB
36692 exploit, x_refsource_EXPLOIT-DB
1032048 vdb-entry, x_refsource_SECTRACK
APPLE-SA-2015-04-08-2 vendor-advisory, x_refsource_APPLE
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1130 government-resource