A local privilege escalation chain from user to kernel for MacOS < 10.15.5. CVE-2020–9854
Unauthd (CVE-2020–9854) A local privilege escalation chain from user to kernel for MacOS < 10155 How does it work? I wrote a blogpost explaining the vulnerabilities and exploitation methods I used It can be found here How do I use it? Build and run the unauthd target in the included xcode project It will hijack the acfskext print a message to the kernel log