CVE-2015-1135

CVE-2015-1135 describes a local privilege escalation vulnerability in fontd, part of Apple Type Services (ATS), affecting Apple OS X versions prior to 10.10.3. An attacker could exploit unspecified vectors to gain elevated privileges on an affected system. With a CVSS score of 7.2 (High), this vulnerability has a local attack vector (AV:L) and low attack complexity (AC:L), requiring no authentication (Au:N). Successful exploitation could lead to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.