CVE-2007-0023

CVE-2007-0023 describes a local privilege escalation vulnerability in Apple Mac OS X 10.4.8, specifically within the CFUserNotificationSendRequest function of UserNotificationCenter.app. An attacker can exploit this by placing a malicious InputManager in a user's home directory, which is then executed with elevated privileges when Cocoa applications attempt to display notifications. This vulnerability has a CVSS score of 6.9, indicating high severity with local access, medium attack complexity, and complete confidentiality, integrity, and availability impacts. While not on the CISA KEV catalog or Hot List, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.