381 matches found
Apple OS X Authentication Bypass Vulnerability
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges...
PT-2022-15623 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.2 Description: An event handler validation issue in the XPC Services API was addressed by removing the service. This issue may allow an application to delete files for which it does not have permission...
CVE-2021-41388
Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods...
Privilege escalation
Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods...
CVE-2021-41388
Affected product: Netskope client for macOS (pre-89.x). Vulnerable component: XPC implementation of nsAuxiliarySvc. Root cause: new connections are not validated before acceptance, enabling a low-privileged user to call external methods as root. Impact: local privilege escalation to highest level...
CVE-2021-41388
Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods...
CVE-2020-15495
Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...
CVE-2020-25736
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...
CVE-2020-25736
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...
CVE-2020-15495
Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...
Privilege escalation
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...
Privilege escalation
Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...
CVE-2020-15495
Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...
PT-2021-11174 · Acronis · Acronis True Image
Name of the Vulnerable Software and Affected Versions: Acronis True Image versions 2019 update 1 through 2021 update 1 Description: The issue allows local privilege escalation due to an insecure XPC service configuration. Recommendations: For Acronis True Image versions 2019 update 1 through 2021...
CVE-2020-25736
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...
PT-2021-18829 · Apple · Ipados +4
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 iOS versions prior to 14.6 iPadOS versions prior to 14.6 tvOS versions prior to 14.6 watchOS versions prior to 7.5 Description: A local attacker may be able to elevate their privileges due to an issue in the...
CVE-2020-25533
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...
Race condition
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...
CVE-2020-25533
CVE-2020-25533 describes a local privilege issue in Malwarebytes for macOS prior to 4.0. A malicious application could exercise a privileged action within the Malwarebytes launch daemon because the service incorrectly validated XPC connections by relying on the process ID (PID) instead of the aud...