CVE-2015-3704

Apple OS X <10.10.4 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-3704. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in the Install.framework's 'runner' binary on macOS. By manipulating the Distributed Objects protocol and triggering an error in the authorization reference handling, an attacker can execute commands with root privileges without proper authentication.

Description

runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textlocalosx
https://www.exploit-db.com/exploits/38138

This exploit leverages a privilege escalation vulnerability in the Install.framework's 'runner' binary on macOS. By manipulating the Distributed Objects protocol and triggering an error in the authorization reference handling, an attacker can execute commands with root privileges without proper authentication.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: macOS Install.framework (private framework)
No auth needed
Prerequisites: Access to a macOS system with the vulnerable Install.framework · Ability to execute the 'runner' binary
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/38138/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/75493
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032760
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT204942

Scores

EPSS 0.0930
EPSS Percentile 94.7%

Details

CWE
CWE-264
Status published
Products (1)
apple/mac_os_x < 10.10.3
Published Jul 03, 2015
Tracked Since Feb 18, 2026