There was a local privilege escalation vulnerability in the kext[1] and another in the installer[2]. pf can filter outbound packets but not by application. [1

There was a local privilege escalation vulnerability in the kext[1] and another in the installer[2]. pf can filter outbound packets but not by application. [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8661 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8661 [2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2675 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2675