This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to load unsigned kernel extensions.
No PoCs from references.
- https://github.com/V0lk3n/OSMR-CheatSheet
- https://github.com/WWeber005/OSMR-CheatSheet