Lucene search

K
zdiEloi Benoist-Vanderbeken (@elvanderb) from Synacktiv (@Synacktiv)ZDI-23-845
HistoryJun 08, 2023 - 12:00 a.m.

(Pwn2Own) Apple macOS /dev/fd Race Condition Local Privilege Escalation Vulnerability

2023-06-0800:00:00
Eloi Benoist-Vanderbeken (@elvanderb) from Synacktiv (@Synacktiv)
www.zerodayinitiative.com
26
vulnerability
privilege escalation
macos
race condition
/dev/fd
filesystem

0.001 Low

EPSS

Percentile

29.7%

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the /dev/fd filesystem. The issue results from the lack of proper locking when performing operations on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.

0.001 Low

EPSS

Percentile

29.7%