Tag
vulnerability
- Inside the screensharingd Bugs: How macOS Screen Sharing Went from Root File Access to Pre-Auth Compromise
- How a single PostScript file leaks your Mac's memory
- The Dangers of Cracking Tools
- CrashOne - A Starbucks Story - CVE-2025-24277
- Finding Vulnerabilities in Apple Packages at Scale
- The diskarbitrationd and storagekitd Audit Story Part 3
- The diskarbitrationd and storagekitd Audit Story Part 2
- The diskarbitrationd and storagekitd Audit Story Part 1
- Dock Tile Plugins Could Be Used to Escalate Privileges
- CVE-2023-40424 - How Malware Can Bypass Transparency Consent and Control
- How Apple Mitigates Vulnerabilities in Installer Scripts
- CVE-2022-22655 - TCC - Location Services Bypass
- CVE-2022-32929 - Bypass iOS backup's TCC protection
- CVE-2017-2533 - The details behind
- CVE-2021-30808 - CVE-2021-1784 strikes back - TCC bypass via mounting
- CVE-2020-9771 - Reversing Engineering the Fix
- NOCVE - Microsoft Teams for macOS Local Privilege Escalation
- CVE-2020-9771 - mount_apfs TCC bypass and privilege escalation
- CVE-2020-14977 - Secure coding XPC Services - Part 5 - PID reuse attacks
- CVE-2020-14978 - Secure coding XPC Services - Part 4 - Improved client authorization
- CVE-2020-0984 - Secure coding XPC Services - Part 3 - Incorrect client verification
- TALK - Exploiting directory permissions on macOS
- CVE-2020-14974 & CVE-2020-14975 - IOBit Unlocker 1.1.2 - Local Privilege Escalation
- TALK - macOS - Getting root with benign AppStore apps
- CVE-2020-14976 - GNS3 ubridge SETUID bit - arbitrary file read
- CVE-2019-5514 - VMware Fusion 11 - Guest VM RCE