bazad/gsscred-move-uaf

PoC

CVE-2018-4343: Proof-of-concept for a use-after-free in the GSSCred daemon on macOS and iOS.

view exploit source poc_in_githubauthor bazadpublished 2017-12-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-4343US	high7.8	1.98% (80th)	Exploit	2019-04-03
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.