{"vulnerability": "CVE-2021-1815", "sightings": [{"uuid": "3e127007-f78a-4313-9ea1-fe76a8deaf65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1815", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/43985", "content": "CVE-2021-1815 \u2013 macOS local privilege escalation via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/\n\nApple recently fixed three vulnerabilities in macOS 11.3\u2019s Preferences. Here we present\n\nour writeup about how we identified one of the issues, and how we exploited it.\nThe post CVE-2021-1815 - macOS local privilege escalation via Preferences (https://www.offensive-security.com/offsec/macos-preferences-priv-escalation/) first appeared on Offensive Security (https://www.offensive-security.com/).", "creation_timestamp": "2021-05-06T16:22:33.000000Z"}, {"uuid": "95a68fd7-4ade-4174-95ba-3b4d9ceb0082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1815", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3314", "content": "#exploit\nCVE-2021-1815:\nmacOS LPE Via Preferences\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation\n]-> Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020", "creation_timestamp": "2024-10-04T15:07:51.000000Z"}, {"uuid": "7dce6e83-3cb1-4ec7-a923-1a2cc5650f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1815", "type": "seen", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-01T17:00:50.783033Z"}, {"uuid": "0bc571ed-3419-43ab-8458-c95288e235e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1815", "type": "seen", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-02T01:04:39.816690Z"}, {"uuid": "9e397cbf-fdbf-440a-86e0-ce83efc98120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1815", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-11T07:00:04.997068Z"}, {"uuid": "47508747-bc1b-43a3-8655-4930e7034b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1815", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-12T00:00:49.410971Z"}]}