Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-1140. PoCs published by kpwn.
AI-analyzed exploit summary This PoC demonstrates a heap overflow exploit in the XNU kernel (CVE-2015-1140) to achieve local privilege escalation on macOS. It includes tools to patch/unpatch the vulnerable function in the IOHIDFamily kext.
Description
Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
Exploits (1)
nomisec
WORKING POC
72 stars
by kpwn · poc
https://github.com/kpwn/vpwn
This PoC demonstrates a heap overflow exploit in the XNU kernel (CVE-2015-1140) to achieve local privilege escalation on macOS. It includes tools to patch/unpatch the vulnerable function in the IOHIDFamily kext.
Classification
Working Poc 90%
Attack Type
Lpe
Complexity
Complex
Reliability
Reliable
Target:
Apple macOS (Darwin Kernel) versions up to 10.10.2 (XNU 2782.20.39.0.1)
No auth needed
Prerequisites:
Local access to a vulnerable macOS system · Compilation of the exploit code
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT204659
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/73982
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032048
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
Scores
EPSS
0.0096
EPSS Percentile
56.9%
Details
CWE
CWE-119
Status
published
Products (1)
apple/mac_os_x
< 10.10.3
Published
Apr 10, 2015
Tracked Since
Feb 18, 2026