CVE-2006-4392

CVE-2006-4392 describes a local privilege escalation vulnerability in the Mach kernel, affecting Mac OS X versions 10.4 through 10.4.7 and OpenStep before 4.2. An attacker can exploit this by manipulating Mach exception ports in a parent process to alter a setuid child's execution flow, forcing it to execute attacker-controlled code. With a CVSS score of 7.2, this vulnerability allows for complete compromise of confidentiality, integrity, and availability from a local attacker. While not on the KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage.