CVE-2019-20856: Uncontrolled Search Path Element

An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR L...

PT-2017-15434

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description The issue involves the Speech Framework component and allows attackers to conduct sandbox-escape attacks via a crafted app. It is related to the speechsynthesisd Unsigned Dylib Loading Privilege...

Thunderstrike 2 Mac OS X Firmware Worm

A new attack against Intel firmware running in Apple computers is expected to be unveiled at this week’s Black Hat conference. The research is an extension of the Thunderstrike Mac OS X firmware bootkit disclosed this spring that enables the undetectable installation of malicious firmware that...