PatchTheCVECVE-2006-4392: The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep befo
CVE-2006-4392 is a high-severity flaw (CVSS 7.2) affecting mac os x, openstep. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function.
Why this priority
- High severity
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.2 (High) |
| EPSS exploit chance | 1.6% (top 24%) |
| CISA exploited list | No |
| Published | 2006-10-03 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
- Exploit-DB: Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2006-4392?
mac os x: mitigate or apply the listed mitigation; openstep: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2006-4392 being exploited?
CVE-2006-4392 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2006-4392 affect?
CVE-2006-4392 affects mac os x, openstep. Severity is high (CVSS 7.2). The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach except
How urgent is CVE-2006-4392?
Priority 49/100. High severity; Public exploit reference
Related CVEs
- CVE-2021-4187 HIGH 7.8 UPGRADE MITIGATE vim is vulnerable to Use After Free
- CVE-2021-4173 HIGH 7.8 UPGRADE MITIGATE vim is vulnerable to Use After Free
- CVE-2022-23308 HIGH 7.5 UPGRADE MITIGATE valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
- CVE-2020-36230 HIGH 7.5 UPGRADE MITIGATE A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsi
- CVE-2020-36229 HIGH 7.5 UPGRADE MITIGATE A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN par