cve-2026-28912

CVE-2026-28912 — Reverse engineering notes and reproduction Independent reverse engineering of the macOS PackageKit symlink-following bug CVE-2026-28912, plus a working PoC that demonstrates the installer writing an attacker-controlled file as root through a directory symlink in the install...

Exploit for Protection Mechanism Failure in Apple Macos

CVE-2026-28912 — Reverse engineering notes and reproduction I...

Apple macOS PackageKit PKCoreShove Link Following System Integrity Protection Bypass Vulnerability

This vulnerability allows local attackers to bypass System Integrity Protection on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within PackageKi...