iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 & CVE-2025-31201 | iMessage Zero-Click RCE Chain Summary This repository documents research into a zero-click remote exploit chain affecting iOS 18.x and beyond. A malformed AMR audio file delivered via iMessage triggers: 1. Heap corruption in CoreAudio CVE-2025-31200 — in...

malware-ioc

Lucid The Lucid Phishing-as-a-Service PhAAS platform, developed by the XinXin group, facilitates large-scale phishing campaigns targeting global organizations, including postal and courier services. Utilizing advanced technologies like RCS and iMessage, the group employs automated tools and evasi...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – iOS AudioConverterService Zero-Click RCE Public disclosure of CVE-2025-31200 – a zero-click remote code execution RCE vulnerability in Apple's iOS 18.X, specifically within the AudioConverterService component. The vulnerability is triggered by a malicious audio file delivered via...

Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-43300: O.o.B Wrrite in ImageIO CVE-2025-24201: WebKit Remote Code Execution CVE-2025-24085: Core Media Privilege Escalation Patched: Jan-March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 VirusTotal Analysis Verified Hash Summary...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined. As of today, other updat...

EUVD-2026-120405

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an iMessage group may be able to access...

EUVD-2026-120406

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage...

CVE-2026-113961

An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker...

CVE-2026-113960

This issue was addressed by removing the vulnerable code. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an...

CVE-2026-113961

An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker...

CVE-2026-113960

This issue was addressed by removing the vulnerable code. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an...

CVE-2026-113961

An authorization issue in the iMessage component allows a remote attacker to join a group chat and receive its messages. This flaw was addressed by Apple through improved validation in several operating systems. Affected Products and Versions: iOS 26.7.3, 27.2.1 iPadOS 26.7.3, 27.2.1 macOS Golden...

CVE-2026-113960

This vulnerability affects iMessage on several Apple platforms, where a user added to a group may be able to access messages sent before they joined. The issue was addressed by removing the vulnerable code . The fix is available in iOS 26.7.3 , iPadOS 26.7.3 , iOS 27.2.1 , iPadOS 27.2.1 , macOS G...

CVE-2026-113960: Apple: This issue was addressed by removing the vulnerable code

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an iMessage group may be able to access...

PT-2026-141109

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.3 iPadOS versions prior to 26.7.3 iOS versions prior to 27.2.1 iPadOS versions prior to 27.2.1 macOS Golden Gate versions prior to 27.2.1 macOS Sequoia versions prior to 15.8.3 macOS Tahoe versions prior to 26.7.3...

macOS 27.x < 27.2.1 Multiple Vulnerabilities (149718)

The remote host is running a version of macOS / Mac OS X that is 27.x prior to 27.2.1. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote...

CVE-2026-113961: Apple: An authorization issue was addressed with improved validation

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage...

macOS 26.x < 26.7.3 Multiple Vulnerabilities (149719)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.7.3. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote...

PT-2026-141110

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.3 iPadOS versions prior to 26.7.3 iOS versions prior to 27.2.1 iPadOS versions prior to 27.2.1 macOS Golden Gate versions prior to 27.2.1 macOS Sequoia versions prior to 15.8.3 macOS Tahoe versions prior to 26.7.3...