CVE-2015-4290: Cisco AnyConnect Secure Mobility Client

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255.

Affected products

• Cisco AnyConnect Secure Mobility Client: version 4.0(2049) only

Published 2015-07-29. Last modified 2026-06-17.