SecWiki / macos-kernel-exploits

macos-kernel-exploits MacOS平台提权漏洞集合 https://www.sec-wiki.com

macos-kernel-exploits

本仓库维护目前已公开的 macos 提权漏洞，欢迎大家一起来维护这个仓库

已验证漏洞列表

• CVE-2015-3760 - DYLD_PRINT_TO_FILE 特性本地提权
• CVE-2017-13872 - root 账号空口令提权漏洞

其他漏洞

以下漏洞还未测试验证

• IOHIDeous - a macOS-only vulnerability in IOHIDFamily
• iOS/MacOS kernel double free due to IOSurfaceRootUserClient not respecting MIG ownership rules
• Apple macOS/IOS 10.12.2(16C67) mach_msg Heap Overflow
• System Integrity Protection (SIP) bypass for OSX 10.11.1 - 10.11.2 - 10.11.3
• Exploit code for CVE-2016-1757
• Exploiting rootpipe again