CoreTrustDemo

Demo for Linus Henze's CoreTrust bug CVE-2022-26766, CoreTrust allows any root certificate See https://worthdoingbadly.com/coretrust/ for usage...

CVE-2022-26766

creationtimestamp| type| source ---|---|--- 2022-07-02 06:22:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2622 2022-07-04 11:00:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6332 2022-07-04 15:18:54+00:00| published-proof-of-concept|...

CVE-2022-26766

A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation...

CVE-2022-26766

CVE-2022-26766 is a certificate parsing issue addressed by Apple in updates for multiple OSes. The advisory states that a malicious app may bypass signature validation due to improved checks in certificate parsing. Affected and fixed versions include: tvOS 15.5; iOS 15.5 and iPadOS 15.5; watchOS ...