CVE-2015-5833

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-254

Affected software

No affected versions have been published.

Timeline

Published
Oct 9, 2015
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-58344.3IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.CVE-2015-58354.3Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interceCVE-2015-58364.3Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access toCVE-2015-58374.3PluginKit in Apple iOS before 9 allows attackers to bypass an intended app-trust requirement and install arbitrary extensions via a crafted CVE-2015-58384.3SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windCVE-2015-58395.0dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an eCVE-2015-58405.0The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service (overflow fault and app crasCVE-2015-58415.0The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT requCVE-2015-58422.1XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensiCVE-2015-58437.2IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspeciCVE-2015-58449.3IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (mCVE-2015-58459.3IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (m
CVE-2015-5833: High severity, CVSS 7.2 | Vulnix