CVE-2024-8272

The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication (IPC). Specifically, the service does not verify the code requirements, entitlements, or security flags of any client attempting to establish a connection. This lack of proper validation allows unauthorized clients to exploit the service's methods and escalate privileges to root.

• CWE-862

• https://pentraze.com/vulnerability-reports

Published

Nov 25, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8266An issue was discovered in GitLab CE/EE affecting all versio…6.6
• CVE-2024-8267The Radio Player – Live Shoutcast, Icecast and Any Audio Str…5.4
• CVE-2024-8268The Frontend Dashboard plugin for WordPress is vulnerable to…8.8
• CVE-2024-8269The MStore API – Create Native Android & iOS Apps On The Clo…6.5
• CVE-2024-8270The macOS Rocket.Chat application is affected by a vulnerabi…5.5
• CVE-2024-8271The The FOX – Currency Switcher Professional for WooCommerce…7.3
• CVE-2024-8273Authentication Bypass by Spoofing vulnerability in HYPR Serv…8.8
• CVE-2024-8274The WP Booking Calendar plugin for WordPress is vulnerable t…6.1
• CVE-2024-8275The The Events Calendar plugin for WordPress is vulnerable t…9.8
• CVE-2024-8276The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plug…5.4
• CVE-2024-8277The WooCommerce Photo Reviews Premium plugin for WordPress i…9.8
• CVE-2024-8278A privilege escalation vulnerability was discovered in XCC t…7.2