iLEAPP

iOS 日志、事件和 Plist 解析器 iLEAPP 解析 iOS 和 iPadOS 取证提取数据，并生成 HTML、TSV、时间线、KML 和 LAVA 输出。它支持 iOS/iPadOS 11 到当前版本。 在 leapps.org/artifacts 浏览完整可搜索的工件列表（按 LEAPP 工具筛选）。 快速入门（推荐） 下载预构建的发行版 — 无需安装 Python。 LEAPPs 发行版 — 浏览所有 LEAPP 系列工具 iLEAPP GitHub 发行版 — 直接下载 平台| GUI| CLI ---|---|--- Windows|...

CVE-2026-28858

⚠️ CVE-2026-28858 — Apple iOS/iPadOS 中的缓冲区溢出 root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ 严重性：严重 │ CVSS: 9.8 │ CWE-120 │ 远程 ║ ╚══════════════════════════════════════════════════════════════╝ 远程用户无需用户交互或特权即可导致 iOS/iPadOS 系统意外终止或内核内存损坏。 📋 技术信息 字段| 值 ---|--- CVE...

CVE-2023-41993

CVE-2023-41993 CVE-2023-41993 的概念验证（PoC）漏洞利用代码。目前仅编写到 addrof/fakeobj 阶段，可靠性不高。如果想要改进它，可以尝试喷射结构 ID（structure IDs）。 已知受影响版本 MacOS 14.0 iOS 17.0, 17.1 beta 1 iPadOS 17.0...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC 浏览器地址栏欺骗 - iOS/iPadOS CVE-2024-25733 ARC 浏览器地址栏欺骗 PoC - iOS/iPadOS 漏洞利用 PoC（概念验证） root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location = "https://google.com:" +...

CVE-2026-65343-e7eb2ed

CVE-2026-65343 — AppleKeyStore 越界读取（KASLR 绕过） 组件： AppleKeyStore 内核扩展 — LibSerSEPControlDeserialize 受影响： iOS / iPadOS 26.6 23G71 及更早版本 修复于： iOS / iPadOS 26.6.1 23G83 类型： SEP 控制消息反序列化中的越界读取 影响： 内核指针泄露 → 从沙盒内、无权限的进程实现 KASLR 绕过（通过 DYLDINTERPOSE 捕获 ACM 句柄） 致谢 发现者：Drinor Selmanaj （Sentry）、Surya Narayan...

Vulnerabilities found in Apple iOS and iPadOS

Apple has identified several vulnerabilities in iOS and iPadOS. These vulnerabilities involve various security issues, such as authentication failures, out-of-bounds write and read errors, use-after-free situations, buffer overflows, race conditions, permission and authorization problems, memory...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-86904

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86879

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...

CVE-2026-86878

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-86869

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84623

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84621

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-84617

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data...