CVE-2006-4392: apple mac_os_x
Vulnerability summary
CVE-2006-4392 is a high (CVSS 7.2) vulnerability in apple mac_os_x. EPSS estimates a 1.58% chance of exploitation in the next 30 days, higher than 75.1% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 02-10-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.58%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
0.00 pp
From 1.58% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundApple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
Maturity: weaponized
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apple1 product
- mac_os_x10.4 | 10.4.1 | 10.4.2 | 10.4.3 | 10.4.4 | 10.4.5 | 10.4.6 | 10.4.7
Next1 product
- openstep4.1
2 vendors · 2 products
References
12 links- lists.apple.com/archives/security-announce/2006/Sep/msg00002.htmlVendor AdvisoryX Refsource APPLEPatch
- www.us-cert.gov/cas/techalerts/TA06-275A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
Show all 12 references
- www.matasano.com/log/530/matasano-advisory-macos-x-mach-exception-server-privilege-escalation/X Refsource MISCVendor Advisory