Sensei Mac Cleaner
Approved changes feed: RSS · Atom
cpe:2.3:a:sensei:sensei_mac_cleaner:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sensei (231cf215-634d-5265-a2fb-7d87fcacc175) |
|---|---|
| Product | Sensei Mac Cleaner (83838f91-d428-5e53-b238-1bcd9538cdc8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7915 |
vulnerable | 2026-06-08 06:58:23.897212 |
macOS Sensei Mac Cleaner Local Privilege Escalation via PID Reuse - Race Condition Attack
HIGH (7.8)
The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. These operations include arbitrary file deletion and writing, loading and unloading daemons, manipulating file permissions, and loading extensions, among other actions.
The vulnerable module org.cindori.SenseiHelper can be contacted via XPC. While the module performs client validation, it relies on the client's PID obtained through the public processIdentifier property of the NSXPCConnection class. This approach makes the module susceptible to a PID Reuse Attack, enabling an attacker to impersonate a legitimate client and send crafted XPC messages to invoke arbitrary methods exposed by the HelperProtocol interface.
Published: 2024-11-25T17:45:39.978Z
Updated: 2024-11-25T18:43:52.579Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.