DesktopServicesHelper

macOS DesktopServicesHelper LPE Vulnerability Details and PoC Disclosed Diagram explaining the critical macOS DesktopServicesHelper vulnerability and root escalation chain

macOS DesktopServicesHelper LPE Vulnerability Details and PoC Disclosed

Do Son September 24, 2026

TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS...

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

macOS privilege escalation to root via DesktopServicesHelper chown and auth.db hijack with public PoC exploit

Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction

Do Son August 4, 2026

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug....

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88779CVSS 8.7
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
CVE-2026-102490CVSS 8.5
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-102489CVSS 8.7
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-100382CVSS 10.0
Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
Admin intel📅 Updated: Oct 1, 2026
CVE-2026-104286CVSS 9.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
CISA KEV📅 Added to KEV: Oct 1, 2026
CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026

CVE-2026-91107CVSS 9.3
openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record...
📅 Updated: Oct 6, 2026
CVE-2026-21589CVSS 9.3
h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center,...
📅 Updated: Oct 6, 2026
CVE-2026-86246CVSS 9.1
Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including...
📅 Updated: Oct 6, 2026
CVE-2026-91140CVSS 9.6
An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI...
📅 Updated: Oct 6, 2026
CVE-2026-105484CVSS 10.0
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of...
📅 Updated: Oct 6, 2026
CVE-2026-105835CVSS 9.1
PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute...
📅 Updated: Oct 6, 2026
CVE-2026-82531CVSS 9.2
Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never...
📅 Updated: Oct 6, 2026
CVE-2025-12543CVSS 9.6
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and...
📅 Updated: Oct 6, 2026