ios-nehelper-wifi-info-0day

Nehelper Wifi Info 0-day iOS 15.0 このコードは、Private API を直接使用しないように更新しました。詳しくは ブログ記事 をご覧ください。ただし、そのため、このコードは iOS バージョン固有、場合によってはデバイスモデル固有になりました。お使いのデバイスで動作しない場合は、c.c ファイル内のオフセットを再計算して更新してください。オリジナルのコードは direct ブランチにあります。 XPC エンドポイント com.apple.nehelper は、ユーザー指定のパラメータ sdk-version を受け入れ、その値が 524288...

GHSA-7236-3392-C5C6 BuildKit: Custom frontend could bypass Seccomp/AppArmor

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...

CVE-2026-61711

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

VulnCheck KEV: CVE-2020-9771

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system...

PT-2020-20747

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A user may gain access to protected parts of the file system. The issue was addressed with a new entitlement. Recommendations For versions prior to 10.15.4, update to macOS Catalina 10.15.4 to resolv...

CVE-2017-7004

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app...

CVE-2017-7004: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app...

PT-2018-8359

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.2 macOS versions prior to 10.12.5 Description The issue involves the Security component and allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app due to a race...

CVE-2015-7016: Undefined Security Weakness

The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app...

CVE-2008-0865: Undefined Security Weakness

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors...