privilege escalation 3 CVE-2025-43520 The XNU Kernel Buffer Overflow That Gave DarkSword ROOT Apr 4, 2026 CVE-2025-43510 The Kernel COW Race That Gave DarkSword Its First Glimpse Into the XNU Kernel Apr 3, 2026 DarkSword Stage 4 XPC Injection into mediaplaybackd — The Hidden Bridge to the iOS Kernel Mar 27, 2026