Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Uncovered issues fall into use-after-free, buffer-overflow, information leak and denial of service vulnerability classes. Some of these could be combined to achieve remote code execution or privilege escalation.

apple apple macos buffer code code execution denial of service escalation free implementation information leak macos overflow privilege privilege escalation remote code remote code execution rpc service use-after-free vcenter vmware vulnerabilities vulnerability vulnerability deep dive vulnerability spotlight weaknesses