CVE-2016-1828
HIGHApple iOS <9.3.2, OS X <10.11.5, tvOS <9.2.1, watchOS <2.2.1 - RCE/DoS
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2016-1828. PoCs published by Brandon Azad, bazad, SideGreenHand100.
AI-analyzed exploit summary This is a writeup describing the rootsh exploit, which targets CVE-2016-1758 and CVE-2016-1828 for local privilege escalation on OS X Yosemite 10.10.5. It explains the vulnerabilities and provides context but does not include actual exploit code.
Description
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829, and CVE-2016-1830.
Exploits (4)
This is a writeup describing the rootsh exploit, which targets CVE-2016-1758 and CVE-2016-1828 for local privilege escalation on OS X Yosemite 10.10.5. It explains the vulnerabilities and provides context but does not include actual exploit code.
This repository contains a functional local privilege escalation exploit for CVE-2016-1828, targeting OS X Yosemite 10.10.5. It leverages a use-after-free vulnerability in OSUnserializeBinary to achieve kernel code execution via ROP, combined with an info leak (CVE-2016-1758) to bypass KASLR.
The repository contains only a minimal README with a brief description of a local privilege escalation exploit for OS X 10.10.5 via CVE-2016-1828, but no actual exploit code or technical details.
The repository contains only a minimal README with a brief description of CVE-2016-1828 but no actual exploit code or technical details. It lacks functional PoC or analysis.
References (10)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H