EIP-2026-104591
PRE-CVEApple Mac OSX xnu 1228.9.59 - Kernel Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104591. PoCs published by mu-b.
AI-analyzed exploit summary This is a functional local privilege escalation exploit for macOS X xnu kernels up to version 1228.3.13. It leverages a vulnerability in workqueue_additem and workqueue_removeitem functions due to improper validation of the user-defined 'prio' parameter, combined with heap spraying via the profil syscall to achieve arbitrary kernel memory corruption and execute privileged code.
Description
Apple Mac OSX xnu 1228.9.59 - Kernel Privilege Escalation
Exploits (1)
This is a functional local privilege escalation exploit for macOS X xnu kernels up to version 1228.3.13. It leverages a vulnerability in workqueue_additem and workqueue_removeitem functions due to improper validation of the user-defined 'prio' parameter, combined with heap spraying via the profil syscall to achieve arbitrary kernel memory corruption and execute privileged code.