CVE-1999-1076: Apple macOS

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.

Affected products

• Apple macOS: version 9 only

Published 1999-10-26. Last modified 2026-06-16.