CVE-2021-30864

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2021-30864

creationtimestamp| type| source ---|---|--- 2021-11-04 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4675...

CVE-2021-30864

CVE-2021-30864 describes a macOS App Sandbox escape via Launch Services/Open, enabling sandbox-bypass techniques against sandboxed apps (notably Microsoft Office). The linked MSSECURE analysis confirms the vulnerability exploited by manipulating the container directory, and abusing open and envir...