References https://nvd.nist.gov/vuln/detail/CVE-2023-42931 https://support.apple.com/en-us/120874 https://support.apple.com/en-us/120879 https://support.apple.com/en-us/120875 https://github.com/d0rb/CVE-2023-42931 https://socprime.com/blog/cve-2023-42931-detection-critical-macos-vulnerability-enabling-easy-privilege-escalation-and-root-access/ https://www.sentinelone.com/vulnerability-database/cve-2023-42931/ https://securityonline.info/cve-2023-42931-macos-flaw-exposed-systems-to-easy-privilege-escalation-patch-now/ https://hackhunting.wordpress.com/2024/04/05/easy-root-privilege-escalation-in-apple-macos-ventura-sonoma-monterey-cve-2023-42931/
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞关于U8cloud所有版本u8capplet.jsp存在XSS漏洞的安全公告PoCCVE-2022-35413: WAPPLES Web Application Firewall <=6.0 - Hardcoded CredentialsPoCapple-cups-exposure: Apple CUPS Sources - ExposurePoCapplezeed-sqli: Applezeed - SQL InjectionPoCwapples-firewall-lfi: Wapples Web Application Firewall - Local File Inclusion(CVE-2025-4082)macOS版Firefox和Thunderbird WebGL着色器越界读取漏洞可导致权限提升Apple Filing Protocol(AFP) 未授权访问漏洞关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告Multiple Apple products CVE-2018-4222越界读取漏洞Apple Filing Protocol(AFP) 弱口令漏洞Apple Webkit CVE-2021-1879 释放后重利用漏洞