241 matches found
xnu
Cos'è XNU? Il kernel XNU fa parte del sistema operativo Darwin utilizzato nei sistemi operativi macOS e iOS. XNU è un acronimo per X is Not Unix. XNU è un kernel ibrido che combina il kernel Mach sviluppato alla Carnegie Mellon University con componenti di FreeBSD e un'API C++ per scrivere driver...
CVE-2018-4407
CVE-2018-4407 CVE-2018-4407 XNU कर्नेल के ICMP त्रुटि कोड में एक बफर ओवरफ्लो भेद्यता है। यह IOS उपकरणों लैपटॉप और मोबाइल दोनों को एक हाँ 1! एकल खराब पैकेट प्राप्त करने पर क्रैश कर देता है। यह बग मूल रूप से केविन बैकहाउस द्वारा उनके lgtm ब्लॉगपोस्ट पर 30 अक्टूबर 2018 को प्रकट किया गया था। इस रेपो...
Trigon
Trigon Trigon è un exploit deterministico del kernel basato su CVE-2023-32434. Attualmente supporta i dispositivi A9 - A11 con iOS 13 - 15.7.6. Essere deterministico significa che questo exploit non causerà mai un panic durante o dopo lo sfruttamento ed è completamente affidabile. Trigon sfrutta ...
CVE-2026-49418 Use-after-free in device pager page list
When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...
clipwire
clipwire Kernel exploit development harness for the iPhone...
One (Thread) Can Keep a (PRNG) Secret, but Not Two
We present a novel, practical attack on the IPv6 Fragment ID generation algorithm of XNU, which is the kernel used by Apple products such as macOS and iOS. This attack exploits a race-condition vulnerability in the algorithm's pseudorandom number generator PRNG to cryptanalytically break, learn t...
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2026-20698 — XNU Kernel Heap Overflow via PFROUTE RTAGEN...
📄 macOS 10.13.4 (17E199) fgetattrlist Heap Overflow
Proof of concept Metasploit module that exploits a macOS version 10.13.4 heap overflow vulnerability. A kernel heap overflow exists in fgetattrlist due to missing lower-bound buffer size validation when writing returned attributes to caller-supplied memory...
📄 macOS 10.12.2 XNU Kernel Race Condition
This proof of concept code demonstrates a race condition observed in the setdpcontrolport function within XNU kernel versions prior to macOS 10.12.2 and iOS 10.2...
📄 macOS 10.12.2 XNU Kernel Privilege Escalation
This proof of concept targets a race‑condition vulnerability in the XNU kernel affecting macOS/iOS. By forcing a use‑after‑free condition on kernel ports, the exploit manipulates freed memory through a controlled spray, allowing a user‑controlled replacement object. Successful exploitation yields...
Modern IOS Security Features -- a Deep Dive into SPTM, TXM, and Exclaves
The XNU kernel is the basis of Apple's operating systems. Although labeled as a hybrid kernel, it is found to generally operate in a monolithic manner by defining a single privileged trust zone in which all system functionality resides. This has security implications, as a kernel compromise has...
EUVD-2007-4668
Malware in sbrugna...
EUVD-2013-3887
Malware in sbrugna...
EUVD-2015-5825
Malware in sbrugna...
EUVD-2009-1236
Malware in sbrugna...
XNU VM_BEHAVIOR_ZERO_WIRED_PAGES Page Write
There is an issue where XNU VMBEHAVIORZEROWIREDPAGES behavior allows writing to read-only pages...
PT-2025-3034 · Apple · Xnu Kernel +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: A type confusion issue was addressed with improved memory handling. An attacker with user privileges may be able to read kernel memory due to...
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2024-27815 XNU kernel buffer overflow. Introduced in xnu...
PT-2024-13027
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple macOS versions prior to 14 Description This issue involves a use-after-free condition addressed through improved memory management. A malicious application may potentially...