Lucene search

K
zdiSamuel Gross (saelo)ZDI-18-1339
HistoryNov 05, 2018 - 12:00 a.m.

(Pwn2Own) Apple macOS task_set_special_port Port Overwrite Privilege Escalation Vulnerability

2018-11-0500:00:00
Samuel Gross (saelo)
www.zerodayinitiative.com
25

EPSS

0.008

Percentile

81.5%

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach ports. The issue results from ability to modify ports that are inherited by child processes. An attacker can leverage this vulnerability to execute code under the context of root.