weightBufs

WeightBufs: WeightBufs は、Neural Engine を搭載したすべての Apple デバイス向けのカーネル r/w エクスプロイトです。 バグとエクスプロイトは @simo36 によるものです。脆弱性と悪用手法の詳細については、POC での発表スライド をご覧ください。 このエクスプロイトはハードコードされたアドレスやオフセットに依存しておらず、macOS12 から 12.4 まで、および OS 15 から 15.5 まででそのまま動作するはずです。 カーネルの脆弱性はすべての iOS 15 バージョン（16.0 まで）に影響しますが、サンドボックスエスケープは...

CVE-2026-28858

⚠️ CVE-2026-28858 — Apple iOS/iPadOS 버퍼 오버플로우 root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ 심각도: 치명적 │ CVSS: 9.8 │ CWE-120 │ 원격 ║ ╚══════════════════════════════════════════════════════════════╝ 원격 사용자는 사용자 상호작용이나 권한 없이 iOS/iPadOS에서 시스템의 예기치 않은 종료 또는 커널 메모리 손상을...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC： root@kitploit: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 またはスクリプトを使用 root@kitploit: python checkicmpdos.py 127.0.0.1...

check_icmp_dos-CVE-2018-4407-

원리 원리는 "icmp" 패킷의 다른 필드를 비정상적으로 만들어 macOS 또는 iPhone 커널이 파싱할 때 크기 검사를 구현하지 않아 crash가 발생하게 하는 것입니다. 영향받는 기기 1. Apple iOS 11 및 이전 버전: 모든 기기 2. Apple macOS High Sierra영향을 받는 최신 버전은 10.13.6: 모든 기기 3. Apple macOS Sierra영향을 받는 최신 버전은 10.12.6: 모든 기기 4. Apple OS X El Capitan 및 이전 버전: 모든 기기 Apple은 10월 30일에...

CVE-2025

CVE-2025-43300: iOS/macOS DNG 이미지 처리 메모리 손상 개요 CVE-2025-43300은 Apple 이미지 처리 프레임워크의 치명적인 메모리 손상 취약점으로 iOS 18.6.1 및 macOS 시스템에 영향을 미칩니다. 이 취약점은 RawCamera.bundle 내의 JPEG Lossless 압축 해제 코드에 존재하며, DNG 파일의 TIFF 메타데이터와 JPEG 스트림 매개 변수 간의 불일치로 인해 트리거됩니다. 취약점 세부 정보 근본 원인 이 취약점은 DNG디지털 네거티브 파일의 메타데이터/스트림...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions through a crafted HTML page...

CVE-2026-65339

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:49+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-65332

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:33+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

PT-2026-76847

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2026-28956 Donate Support the maintenance of this pro...

CVE-2026-64722

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a 3D model may result in disclosure of process memory...

CVE-2026-43700

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose...

CVE-2026-39868

CVE-2026-39868 affects Apple platforms (macOS Tahoe, iOS, iPadOS) and centers on a risk from improper input validation in the kernel pathway that could allow an app to cause an unexpected system termination or kernel memory corruption. The vulnerability is addressed in macOS Tahoe 26.5.2 and iOS/...

CVE-2026-43742

CVE-2026-43742 describes a use-after-free vulnerability tied to processing malicious web content, addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected sources enumerate affected components including WebKit (and WebKit subareas like W...

CVE-2026-47430

Summary The iOS implementation of cordova-plugin-inappbrowser passes the id field from a WKScriptMessage body to commandDelegate sendPluginResult:callbackId: with no format validation CDVWKInAppBrowser.m:560–574. Any web content loaded inside the InAppBrowser can fire any pending Cordova callback...

CVE-2026-10951

Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-11277

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

CVE-2026-28974

CVE-2026-28974 affects Apple platforms and is described as a denial-of-service risk due to an issue where an app could trigger unauthorized actions. Connected advisories confirm fixes in iOS/iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Affected ...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Versions of Apple iOS prior to 26.5 and iPadOS prior to 26.5 contained security vulnerabilities. These...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS before 18.7.9, as well as versions before 26.4,...