CVE-2019-8805

CVE-2019-8805 Exploit pour l'élévation de privilèges du framework EndpointSecurity d'Apple CVE-2019-8805 Un problème de validation existait dans la vérification des droits d'accès entitlements. Ce problème a été corrigé en améliorant la validation des droits d'accès du processus. Ce problème est...

memdumper

memdumper memdumper lit la mémoire d'un processus macOS en cours d'exécution sous l'entitlement de débogueur d'un autre binaire signé. L'objectif est que taskforpid et ptrace s'exécutent en tant que ce binaire doté de l'entitlement, afin qu'un EDR l'enregistre plutôt que memdumper. par cenobyte...

cve-2023-40429-ez-device-name

HostName Обзор HostName — это пример приложения, демонстрирующий, как стороннее приложение может получить доступ к имени устройства пользователя без права com.apple.developer.device-information.user-assigned-device-name. Подробности В iOS 16 Apple добавила право...

ios-nehelper-wifi-info-0day

Nehelper Wifi Info 0-day iOS 15.0 J'ai mis à jour ce code pour éviter d'utiliser directement l'API privée. Lisez-en plus dans mon article de blog. Cependant, cela signifie que ce code est désormais spécifique à la version d'iOS et éventuellement au modèle d'appareil. Donc, s'il ne fonctionne pas...

CVE-2025-24204

CVE-2025-24204 О проекте CVE-2025-24204 — это уязвимость, позволяющая читать память любого процесса в macOS-системах с включённой SIP. Корневая причина этой уязвимости — добавление чрезмерно мощного entitlement com.apple.system-task-ports.read к бинарному файлу gcore. Эксплуатация этой уязвимости...

BuildKit: Custom frontend could bypass Seccomp/AppArmor

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...

GHSA-7236-3392-C5C6 BuildKit: Custom frontend could bypass Seccomp/AppArmor

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...

CVE-2026-61711

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-61711

In BuildKit versions prior to 0.31.1, the file executor/oci/spec_linux.go treated an invalid SecurityMode value from a crafted build request as non-sandbox mode without requiring the security.insecure entitlement, disabling Seccomp and AppArmor protections for the build container. Linux capabilit...

CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

PT-2026-78679

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1 Description BuildKit is a toolkit used to convert source code into build artifacts. A custom frontend can send a crafted build request containing an invalid SecurityMode value. The executor/oci/spec linux.go...

CVE-2026-64711

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information...

CVE-2026-43665

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing...

CVE-2026-43665

CVE-2026-43665 affects macOS via a local-attack path where additional entitlement checks could allow a local attacker to determine the legacy VNC password configured for Screen Sharing. Connected sources specify the root cause as entitlement checks and confirm the fix in macOS Sequoia 15.7.8 and ...

CVE-2026-64711

CVE-2026-64711 affects Apple platforms where improper entitlement checks could allow an app to leak sensitive user information. Concrete details in the initial record specify the affected software versions and fixes: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Taho...

CVE-2026-64711

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information...

EUVD-2026-49431

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information...

CVE-2026-64711

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information...

PT-2026-65248

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An application may be able to leak sensitive user information...