الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Wildn00B

باحث منTikTok USDS Red Team
#32815من 60,399
8.8إجمالي CVSS
الثغرات · 1
PT-2024-36621
2024-12-17
8.8
CVE-2024-55968
Dtex
Dtex Dec-M
An issue was discovered in the com.dtexsystems.helper service, which handles privileged operations within the macOS DTEX Event Forwarder agent. The service fails to implement critical client validation during XPC interprocess communication (IPC), allowing malicious actors to exploit the service's methods via unauthorized client connections. This can lead to privilege escalation to root by abusing the `DTConnectionHelperProtocol` protocol's `submitQuery` method over an unauthorized XPC connection.