Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Waleed Barakat

Researcher fromTikTok USDS Red Team
#32658of 60,387
8.8Total CVSS
Vulnerabilities · 1
PT-2024-36621
2024-12-17
8.8
CVE-2024-55968
Dtex
Dtex Dec-M
An issue was discovered in the com.dtexsystems.helper service, which handles privileged operations within the macOS DTEX Event Forwarder agent. The service fails to implement critical client validation during XPC interprocess communication (IPC), allowing malicious actors to exploit the service's methods via unauthorized client connections. This can lead to privilege escalation to root by abusing the `DTConnectionHelperProtocol` protocol's `submitQuery` method over an unauthorized XPC connection.