macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

SUSE CVE-2026-116728

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

SUSE CVE-2026-116729

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

EUVD-2026-110477

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

EUVD-2026-110476

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

CVE-2026-116728

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

CVE-2026-116729

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

CVE-2026-116729

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

UBUNTU-CVE-2026-116728

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

UBUNTU-CVE-2026-116729

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

CVE-2026-116729

Versions of libfvde up to 20260923 are susceptible to a heap out-of-bounds read vulnerability in the libfvde_encrypted_metadata_read_type_0x001a() function. The root cause is an unbounded strlen operation performed on embedded XML plist data. An attacker can provide a crafted FileVault 2 volume c...

CVE-2026-116729 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

CVE-2026-116729 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

CVE-2026-116728

The libfvde library, in versions through 20260923 , is vulnerable to a heap out-of-bounds read in the libfvde_encrypted_metadata_read_type_0x0024() function. The root cause is a failure to validate xml_plist_data_size against the source metadata block. An attacker can provide a crafted FileVault ...

CVE-2026-116728 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

CVE-2026-116728 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x0024

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x0024 because xmlplistdatasize is not checked against the source metadata block. Attackers can supply a crafted FileVault 2 Core Storage volume that makes libfvdevolumeopen copy past the...

PT-2026-125478

Name of the Vulnerable Software and Affected Versions libfvde versions prior to 20260923 Description A heap out-of-bounds read occurs in the libfvde encrypted metadata read type 0x001a function due to an unbounded strlen operation on embedded XML plist data. An attacker can trigger this by...

CVE-2026-96293

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file lef...

CVE-2026-96293

WatchGuard Endpoint Security 's Full Disk Encryption feature for macOS contains a cleartext storage vulnerability. The issue arises because the software persistently writes a diagnostic log file that is globally readable by all local users. This allows a local, unprivileged user or process to obt...