Vulnerability Spotlight: Apple OS X Graphics Kernel Driver Local Privilege Escalation Vulnerability
Summary: Cisco Talos disclosed a local privilege escalation vulnerability in the Apple Intel HD3000 Graphics kernel driver, tracked as TALOS-2016-0088/CVE-2016-1743, identified on OS X 10.11 and published alongside Apple's security advisory issued on Mar 22. Exploitation requires user interaction, such as running a malicious executable received by email or downloaded to the Mac, and successful exploitation gives the attacker escalated, root-level privileges.
Bottom line: The entry point is a user running a file, and the payoff is root on a Mac - which matters more as OS X spreads through workplaces where standard accounts lack root-level permissions.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-1743
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026