What’s Vulnerable › Vulnerabilities

CVE-2005-2509

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-19 · updated 2026-06-16

Description

Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other accounts if they know the passwords to at least two accounts.

Affected products

macOS: 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1 (+27)
Apple Mac Os X Server: 10.0, 10.1, 10.1.1, 10.1.2, 10.1.3, 10.1.4 (+22)

References

Get alerted when CVE-2005-2509 or the next vulnerability affects your stack