Researcher drops 15-year-old zero-day that affects all Mac OSes

A security researcher dropped a macOS zero-day exploit without giving Apple a heads-up warning to fix the flaw. The vulnerability is a local privilege escalation (LPE) flaw that can be exploited only if an attacker has local access to the Mac or previously pwned the computer. Attackers could disable protections afforded by System Integrity Protection (SIP) and Apple Mobile File Integrity (AMFI) But first, the user has to log out and reboot the Mac to get root access.”]

Source: https://www.csoonline.com/article/3245037/researcher-drops-15-year-old-macos-zero-day-that-leads-to-full-system-compromise.html