CVE-2021-30950

CVE-2021-30950 affects macOS Gatekeeper-related logic. The connected documents confirm a vulnerability in Gatekeeper state management that could allow bypassing Gatekeeper checks. Patches are included in macOS Big Sur 11.6.2, macOS Monterey 12.1, and Security Update 2021-008 Catalina. No exploita...

CVE-2021-30950

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks...

CVE-2021-30861

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may bypass Gatekeeper checks...

CVE-2021-30861

CVE-2021-30861 is an Apple WebKit/Safari issue where a malicious application could bypass Gatekeeper checks. The public documentation ties this to a logic issue addressed by improved state management, with remediation provided by macOS Monterey 12.0.1. The Apple Safari security content entry conf...

CVE-2021-30853

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6. A malicious application may bypass Gatekeeper checks...

CVE-2021-30853

CVE-2021-30853 affects macOS Big Sur (up to 11.6). A security bug in how files with a Shebang header are interpreted by syspolicyd could cause the OS to treat a malicious app as safe, bypassing Gatekeeper checks. The issue is fixed in macOS Big Sur 11.6; users should apply the 11.6 update to reme...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A vulnerability exists in Apple macOS Monterey prior to version 12.0.1 with privilege permission and access control issues that could allow a malicious application to bypass...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile app from Apple. Apple macOS Monterey is the 18th major version of MacOS, Apple's desktop operating system for Macintosh. macOS Catalina is Apple's suite of Catalina is Apple's proprietary operating system developed specifically for Mac computers. Several Apple...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur suffers from a privilege-granting and access-control issue vulnerability that stems from malicious OSAX script additions that could bypass Gatekeeper checks and circumvent sandboxing restrictions...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur suffers from a Permission Permission and Access Control Issue vulnerability that originates from a malicious application that may bypass Gatekeeper checks...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.6 that allows malicious applications to bypass Gatekeeper checks...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur suffers from a privilege-granting and access-control issue vulnerability that originates from a malicious application that could bypass Gatekeeper checks...

New AdLoad Variant Bypasses Apple's Security Defenses to Target macOS Systems

A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 alone, some of which have slipped past Apple's on-device malware scanner and even signed by its own notarization service, highlighting the malicious software ongoi...

Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices

Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year. The updates, which arrive less than a week after th...

OSX.XLoader hides little except its main purpose: What we learned in the installation process

Last week, Check Point Research described a new Mac variant of malware they call XLoader. It was identified as being the successor of something called Formbook, a very prevalent threat in the Windows world. According to Check Point, the Mac version of the malware is being "rented" as part of a...

Apple macOS 安全特征问题漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security signature issue vulnerability exists in macOS that stems from a logic error in AppleScript. Native applications can bypass Gatekeeper checks. The vulnerability allows native applications to bypass...

About the security content of macOS Big Sur 11.4

About the security content of macOS Big Sur 11.4 This document describes the security content of macOS Big Sur 11.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of Security Update 2021-003 Catalina

About the security content of Security Update 2021-003 Catalina This document describes the security content of Security Update 2021-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

Metasploit Wrap-Up

Stopped at the gate? A fun new module from timwr, taking advantage of a technique reported by Cedric Owens, is reminding everyone if there is no fence a gate will not deter us. The new module provides a quick wrapper for payloads that bypasses download origination and authorization requirements...

macOS Gatekeeper Check Bypass Exploit

This Metasploit module serves an OSX app as a zip that contains no Info.plist, which bypasses gatekeeper in macOS versions prior to 11.3. If the user visits the site on Safari, the zip file is automatically extracted, and clicking on the downloaded file will automatically launch the payload. If t...