{"vulnerability": "CVE-2024-9062", "sightings": [{"uuid": "81856d81-30a6-4b5d-bafc-92693b0a4cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9062", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9062\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which is exposed via XPC. Archify follows the \"factored applications\" model, delegating privileged operations\u2014such as arbitrary file deletion and file permission changes\u2014to this helper running as root. However, the helper does not verify the code signature, entitlements, or signing flags of the connecting client. Although macOS provides secure validation mechanisms like auditToken, these are not implemented. As a result, any local process can establish a connection to the helper and invoke privileged functionality, leading to unauthorized execution of actions with root-level privileges.\n\ud83d\udccf Published: 2025-06-10T23:25:30.420Z\n\ud83d\udccf Modified: 2025-06-10T23:25:30.420Z\n\ud83d\udd17 References:\n1. https://pentraze.com/\n2. https://pentraze.com/vulnerability-reports/", "creation_timestamp": "2025-06-11T00:34:30.000000Z"}, {"uuid": "ef32b576-6a9f-4c6d-aa2b-fec3ad807665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrcf5ppab42m", "content": "", "creation_timestamp": "2025-06-11T02:43:32.964488Z"}, {"uuid": "79b7369f-9066-4fcb-84b5-1ad56250d20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9062", "type": "seen", "source": "Telegram/NGz98OHuB76pMx88tOKfrQ_tc8XVIqKfHlr0e5BI3wIw-X8", "content": "", "creation_timestamp": "2025-06-11T11:03:08.000000Z"}, {"uuid": "a8e824ee-b384-4a9e-b763-c1a5ec400011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9062", "type": "seen", "source": "Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkxJk", "content": "", "creation_timestamp": "2025-06-11T11:03:35.000000Z"}]}