CVE-2019-8561: A Hard-to-Banish PackageKit Framework Vulnerability in macOS

This blog entry details our investigation of CVE-2019-8561, a vulnerability that exists in the macOS PackageKit framework, a component used to install software installer packages PKG files...

CVE-2019-8561

CVE-2019-8561 describes a logic/validation issue that could allow a malicious application to elevate privileges on macOS Mojave. Public sources consistently tie this to the PackageKit/installer flow, with a root-privilege impact outlined in multiple records. The fixed version is macOS Mojave 10.1...

Exploit for Improper Input Validation in Apple Mac_Os_X

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 disc...