Advisories
Security advisories
Vulnerabilities I have found and disclosed responsibly. Bug-bounty reports stay private until the program allows publication; what is listed here has cleared coordinated disclosure.
1 published CVE
Local privilege escalation to root in macOS PackageKit
A permissions issue in PackageKit, the macOS framework behind software installation, allowed a malicious app to escalate to root. Apple fixed it in macOS Tahoe 26.4 by adding further restrictions.
Impact An app could gain root privileges — full local compromise of the machine (read/modify any data, persist, disable protections).
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
fixed