📄 MacOS PackageKit ZSH Environment Privilege Escalation

This Metasploit module exploits CVE-2024-27822, a vulnerability in macOS PackageKit.framework where PKG installer scripts using a ZSH shebang !/bin/zsh are executed as root while inheriting the installing users environment. This causes ZSH to load the users /.zshenv with root privileges before th...

CVE-2024-27822

creationtimestamp| type| source ---|---|--- 2024-06-04 04:17:47+00:00| published-proof-of-concept| https://t.me/orderofsixangles/2316 2024-06-04 15:42:49+00:00| published-proof-of-concept| https://t.me/HackingInsights/1529 2024-06-04 17:02:16+00:00| published-proof-of-concept|...

CVE-2024-27822

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges...

CVE-2024-27822

CVE-2024-27822 is a logic issue in macOS Sonoma components (notably PackageKit) that could allow a local app to gain root privileges. It is fixed in macOS Sonoma 14.5; affected systems should update to 14.5 to mitigate. The issue is documented as a local privilege elevation with root access poten...

About the security content of macOS Sonoma 14.5

About the security content of macOS Sonoma 14.5 This document describes the security content of macOS Sonoma 14.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...