Live › vulnerability › CVE-2015-1130
Go to dashboardThe XPC service in Apple OS X Admin Framework before 10.10.3 fails to check authentication properly. A local user with a standard account can gain administrator privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple OS X | vendor | – | – |
Unknown from the sources.
Update Apple OS X to 10.10.3 or later, per vendor instructions in the CISA catalog entry.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2015-1130")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.