CVE-2014-10070

CVE-2014-10070 is a local privilege escalation vulnerability affecting zsh versions prior to 5.0.7. It allows malicious evaluation of initial integer variable values imported from the environment, under specific and atypical conditions where zsh is invoked in privilege-elevation contexts without proper environment sanitization (e.g., sudo with env_reset disabled). With a CVSS score of 7.8 (High), this vulnerability has a local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.