CVE-2015-3673

CVE-2015-3673 is a local privilege escalation vulnerability affecting Apple OS X before version 10.10.4. It allows a local attacker to gain root privileges by manipulating the Admin Framework's handling of writeconfig clients, specifically by moving and modifying Directory Utility. With a CVSS score of 7.2, this vulnerability is considered highly severe due to its low attack complexity and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit modules, including a Metasploit module, are publicly available, indicating a clear path for exploitation, though community discussion and media coverage remain low.