https://insinuator.net/tags/lpe/ Recent content in LPE on Insinuator.net - Bold Statements Hugo en-us Fri, 13 Nov 2020 00:00:00 +0000 https://insinuator.net/2020/11/forklift-lt3.3.9-and-lt3.4-local-privilege-escalations-on-macos-cve-2020-15349/cve-2020-27192/ Fri, 13 Nov 2020 00:00:00 +0000 https://insinuator.net/2020/11/forklift-lt3.3.9-and-lt3.4-local-privilege-escalations-on-macos-cve-2020-15349/cve-2020-27192/ <p>I have started to have a look at my local installed helpers on macOS. These helpers are used as an interface for applications to perform privileged operations on the system. Thus, it is quite a nice attack surface to search for Local Privilege Escalations.</p> <p>Forklift is an advanced dual pane file manager for macOS. It is well known under macOS power users.</p> <p>As part of my investigation I identified vulnerabilities in Forklift allowing local privilege escalation.</p>