CVE-2006-1471EPSS p32.2%

CVE-2006-1471CVE-2006-1471

apple / mac_os_x

Description

Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.

Scoring

CVSS 4.6 ()
VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS0.40% probability of exploitation · percentile 32.2% · 2026-10-05T12:00:23Z
Last modified2026-09-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.