Florian Haselsteiner, SEC Consult Vulnerability Lab

Local Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS

Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS

Slate Digital Connect macOS XPC certificate validation privilege escalation

Slate Digital Connect macOS XPC PID validation privilege escalation

Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access

Missing XPC Client & NSXPC endpoint validation leads to privilege escalation in Vienna Assistant (MacOS) - Vienna Symphonic Library

Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center

World-writable uninstall script executed as root in Arturia Software Center

XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native Access