CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

9.89% chance of exploitation in the next 30 days, 95th percentile

CISA KEV

added 2022-02-10

Published

2015-04-10

Updated

2025-10-22

Proof-of-concept exploits (3)

• Shmoopi/RootPipe-Demo2★ · 2015-04-10
• davidawad/Python-RootKit-Exploit-OSX22★ · 2015-05-30
• svartkanin/source_code_analyzer0★ · 2019-10-04

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/rootpipe.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/36745
• https://www.exploit-db.com/exploits/36692

References

• CVE Record
• NVD entry

Related

• CVE-2015-1126
• CVE-2015-1140
• CVE-2015-1100
• CVE-2015-1155
• CVE-2015-1060
• CVE-2015-1157