> The two bugs, Wardle said, can be launched by a local attacker — that’s where someone has physical control of a vulnerable computer. TechCrunch got this wron

> The two bugs, Wardle said, can be launched by a local attacker — that’s where someone has physical control of a vulnerable computer. TechCrunch got this wrong. "Local" means local privilege escalation, as opposed to "remote" code execution. They do not require physical access. That being said, local privilege escalation on a single user computer where that user is an admin (most Macs), isn't a massive problem in my mind. It would allow malware, once run by the user, to bypass security prompts usually required to elevate access.