CVE-2014-1265 describes a local privilege escalation vulnerability in Apple OS X before version 10.9.2, specifically within the Date and Time subsystem's systemsetup program. An unauthenticated local attacker could exploit this flaw to bypass access restrictions by manipulating the system clock, potentially leading to unauthorized changes. While the CVSS score of 4.6 indicates moderate severity with low attack complexity and partial impact to confidentiality, integrity, and availability, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.9.1CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | ||
10.7.0CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.7.0:*:*:*:*:*:*:* | ||
10.7.1CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.7.1:*:*:*:*:*:*:* | ||
10.7.2CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.7.2:*:*:*:*:*:*:* | ||
10.7.3CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:10.7.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.