CVE-2024-7915

Summary

CVE-2024-7915 is a local privilege escalation vulnerability affecting the application Sensei Mac Cleaner. An attacker can exploit this flaw to execute multiple privileged tasks, such as arbitrary file deletion and writing, manipulating file permissions, and loading extensions. The issue lies in the module org.cindori.SenseiHelper, which can be contacted via XPC. The module validates clients based on their process identifier (PID), obtained through the public processIdentifier property of the NSXPCConnection class. However, this approach makes the module vulnerable to PID reuse attacks, allowing an attacker to impersonate a legitimate client and send malicious XPC messages to invoke arbitrary methods exposed by the HelperProtocol interface.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.