… It is what’s known as a privilege escalation exploit, and if it were chained together with other attacks it could be used by a hacker to seize control of the computer. …
… A flaw here is a pretty serious local privilege escalation, and while it requires someone to physically have your device in hand, that’s exactly a scenario Stolen Device Protection is designed for. …
… The exploit is a data-only kernel local privilege escalation chain targeting macOS 26.4.1 25E253 . It starts from an unprivileged local user, uses only normal system calls, and ends with a root shell. …