| |
ID ▼ |
Type ▼ |
Status ▼ |
Priority ▼ |
Milestone ▼ |
Owner ▼ |
Summary + Labels ▼ |
... |
|---|
|
|
21 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel memory disclosure due to lack of bounds checking in IOUSBControllerUserClient::ReadRegister
|
|
|
|
80 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X coresymbolicationd multiple user to root privilege escalations due to XPC type confusion
CCProjectZeroMembers
|
|
|
|
92 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X sandbox escape due to XPC type confusion in networkd
CCProjectZeroMembers
|
|
|
|
121 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X privilege escalation due to XPC type confusion in sysmond (with exploit)
CCProjectZeroMembers
|
|
|
|
130 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X networkd "effective_audit_token" XPC type confusion sandbox escape (with exploit)
CCProjectZeroMembers
|
|
|
|
135 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel code execution due to NULL pointer dereference in IntelAccelerator
CCProjectZeroMembers
|
|
|
|
136 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel memory corruption due to bad bzero in IOBluetoothDevice
CCProjectZeroMembers
|
|
|
|
181 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit EoP due to lack of bounds checking in Intel GPU driver
CCProjectZeroMembers
|
|
|
|
182 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit EoP due to lack of bounds checking in Intel GPU driver (IOAccelResource2::dirtyLevel)
CCProjectZeroMembers
|
|
|
|
191 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Exploitable Kernel NULL dereference in IGAccelCLContext::map_user_memory
CCProjectZeroMembers
|
|
|
|
214 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kIOMapReadOnly read-only kernel shared memory bypass leading to kernel memory corruption bug in IOAccelContext2
CCProjectZeroMembers
|
|