memdumper

memdumper memdumper lee la memoria de un proceso de macOS en ejecución bajo el entitlement de depurador de otro binario firmado. La idea es que taskforpid y ptrace se ejecuten como ese binario con entitlement, de modo que un EDR lo registre a él en lugar de a memdumper. por cenobyte...

cve-2023-40429-ez-device-name

HostName 概述 HostName 是一个示例应用，演示了第三方应用如何在没有 com.apple.developer.device-information.user-assigned-device-name 授权的情况下访问用户的设备名称。 详细信息 在 iOS 16 中，Apple 添加了 com.apple.developer.device-information.user-assigned-device-name 授权，以防止第三方应用通过设备名称对用户进行指纹识别。然而，ProcessInfo.processInfo.hostName API 在此过程中出现了问题，该 A...

CVE-2025-24204

CVE-2025-24204 关于 CVE-2025-24204 是一个漏洞，允许在启用了 SIP 的 macOS 系统上读取任意进程的内存。此漏洞的根本原因在于向 gcore 二进制文件添加了过于强大的授权（com.apple.system-task-ports.read）。利用此漏洞可以实现： 无需用户明文登录密码即可转储登录钥匙串 绕过 TCC 并访问敏感信息 在 Apple Silicon Mac 上解密 FairPlay 加密的 iOS 应用 作者 Koh M. Nakagawa @tsunek0h。© FFRI Security, Inc. 2025 许可证 Apache 2...

CVE-2026-43786

🔐 CVE-2026-43786 🚨 Escalada de Privilegios Local en macOS — Validación de Derechos Incorrecta 📌 Descripción General CVE-2026-43786 es una vulnerabilidad de escalada de privilegios local que afecta a macOS de Apple. La vulnerabilidad está relacionada con una validación incorrecta de derechos...

CVE-2019-8805

CVE-2019-8805 Exploit para CVE-2019-8805 escalada de privilegios del framework EndpointSecurity de Apple Existía un problema de validación en la verificación de entitlements. Este problema se solucionó mejorando la validación del entitlement del proceso. Este problema se corrigió en macOS Catalin...

ios-nehelper-wifi-info-0day

Nehelper Wifi Info 0-day iOS 15.0 He actualizado este código para evitar usar la API privada directamente. Leer más en mi entrada de blog. Sin embargo, eso significa que ahora este código es específico de la versión de iOS y posiblemente específico del modelo de dispositivo. Así que, si no funcio...

CVE-2026-86892

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denial-of-service...

CVE-2026-86897

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-84631

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...

CVE-2026-84629

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user...

CVE-2026-84514

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-65381

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

CVE-2026-43786

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-43696

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization...

CVE-2026-84631

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...

EUVD-2026-78128

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...

CVE-2026-84631

A privilege escalation vulnerability exists in macOS (specifically affecting Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 ). The root cause involves improper access control and insufficient entitlement checks , which could allow an application to gain root privileges . Impacted systems may also...

CVE-2026-84631

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...

EUVD-2026-78110

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-84514

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...