CVE-2014-1265: The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the…

Unscored severity · published Feb 27, 2014

CVE-2014-1265

The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the…

–

CVSS

0.3%

EPSS

On KEV

Description

The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 27% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Mac OS X · Apple

through 10.9.1; 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; +9 more · source: NVD

Mac OS X Server · Apple

10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 · source: NVD