77 matches found
Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities
Binary data 9840.prm...
Apple macOS Sierra IOSurface Component Memory Corruption Vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOSurface is one of the programming framework components. A security vulnerability exists in the IOSurface component in Apple macOS Sierra versions prior to 10.12.2. A local attacker could exploit the...
MacOS 10.12 - 'task_t' Privilege Escalation Exploit
Exploit for macOS platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=837 TL;DR you cannot hold or use a task struct pointer and expect the euid of that task to stay the same. Many many places in the kernel do this and there are a great many very...
OS X / iOS Kernel - IOSurface Use-After-Free Vulnerability
Exploit for multiple platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=831 IOSurfaceRootUserClient stores a task struct pointer passed in via IOServiceOpen in the field at +0xf0 without taking a reference. By killing the corrisponding task we ca...
Apple macOS 10.12 - task_t Local Privilege Escalation
Apple macOS 10.12 - taskt Local Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=837 TL;DR you cannot hold or use a task struct pointer and expect the euid of that task to stay the same. Many many places in the kernel do this and there are a great many very...
Apple OS XiOS Kernel - IOSurface Use-After-Free
Apple OS XiOS Kernel - IOSurface Use-After-Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=831 IOSurfaceRootUserClient stores a task struct pointer passed in via IOServiceOpen in the field at +0xf0 without taking a reference. By killing the corrisponding task we can free th...
The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges
The vulnerability of the IOSurface component in the Mac OS X operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges using undefined vectors...
Apple OS X El Capitan IOSurface Memory Misreference Vulnerability
Apple OS X is a specialized operating system developed for Mac computers. A memory misreference vulnerability exists in IOSurface for Apple OS X El Capitan 1, which can be exploited by a local attacker to elevate privileges...
CVE-2016-4625
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors...
CVE-2016-4625
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors...
Design/Logic Flaw
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors...
CVE-2016-4625
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors...
CVE-2016-4625
CVE-2016-4625 is a local privilege escalation in Apple macOS OS X El Capitan involving IOSurface. A use-after-free in IOSurface leads to kernel- or system-level code execution with local access prior to patch. Affected: OS X El Capitan v10.11 (and related 10.11.x builds) before 10.11.6; patch sup...
The vulnerability of the OS X operating system, which allows a malicious attacker to execute arbitrary code.
The vulnerability of the IOSurface component allows a remote attacker to execute arbitrary code with elevated privileges using a malicious application that exploits type mismatch errors...
The vulnerability of the iOS operating system, which allows a malicious attacker to execute arbitrary code.
The vulnerability of the IOSurface component allows a remote attacker to execute arbitrary code with elevated privileges using a malicious application that exploits type mismatch errors...
Design/Logic Flaw
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app...
CVE-2015-5880
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-framebuffer access via a crafted background app...
CVE-2015-5880
CVE-2015-5880 affects Apple iOS CoreAnimation, where a background app could bypass IOSurface restrictions and obtain screen-framebuffer access. The root cause is insufficient access control on IOSurfaces prior to the fix, enabling potential exposure of screen content. Public details in connected ...