What’s Vulnerable › Vulnerabilities

CVE-2012-0656

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-05-11 · updated 2026-06-16
• Weakness: CWE-362

Description

Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password.

Affected products

• macOS: 10.7.0, 10.7.1, 10.7.2, 10.7.3

References

• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
• http://support.apple.com/kb/HT5281
• http://www.securityfocus.com/bid/53445
• http://www.securityfocus.com/bid/53459
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
• http://support.apple.com/kb/HT5281
• http://www.securityfocus.com/bid/53445
• http://www.securityfocus.com/bid/53459

Get alerted when CVE-2012-0656 or the next vulnerability affects your stack