CVE-2015-1130
Apple OS X Authentication Bypass Vulnerability
Published Apr 10, 2015 · updated Jun 16, 2026 · apple mac os x
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
Timeline
Detection, updates, and resolution for this record.
Apr 10, 2015 · Catalog
Detected
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
Feb 10, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Aug 10, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
Required action
Apply updates per vendor instructions.
CISA due date Aug 10, 2022
Affected
- cpe apple/mac os xversion unspecified
- vendor Apple OS Xversion unspecified
Sources
- CISA KEVCVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
cisa.gov - CVE.orgCVE-2015-1130
Official CVE identifier
cve.org - FIRST EPSSCVE-2015-1130
30-day exploitation probability 9.9%
first.org - Exploit Database36692
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database36745
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_osx/local/rootpipe
Public module reference (great). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
nvd.nist.gov