CVE-2019-8674

A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8617

CVE-2019-8617 corresponds to a sandbox bypass vulnerability in the iOS Photos Storage component. The Apple advisory states that an attacker could have a sandboxed process circumvent sandbox restrictions, with the issue fixed in iOS 12.3. Public references list the CVE as part of iOS security upda...

CVE-2019-8553

CVE-2019-8553 is a GeoServices memory corruption vulnerability in Apple iOS and tvOS, triggered by clicking a malicious SMS link. The issue is addressed by Apple in iOS 12.2 and tvOS 12.2 (watchOS 5.2). The root cause is described as a memory corruption risk that is mitigated by improved validati...

CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-6222

CVE-2019-6222 (WebKit / iOS) concerns a consistency issue where a website could access the microphone without displaying the microphone-use indicator. The Apple advisory notes this was addressed with improved state handling and was fixed in iOS 12.2. The CVE appears in multiple sources (Apple sec...

CVE-2019-13742

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

About the security content of iOS 12.4.4

About the security content of iOS 12.4.4 This document describes the security content of iOS 12.4.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Threat Source newsletter (Nov. 21, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. It’s nearly holiday shopping season, which means it’s prime scam season. On the latest Beers with Talos episode, we run down the best wa...

In-depth exploration found in the wild iOS exploit chain IV-vulnerability warning-the black bar safety net

Overview This exploit chain for iOS 12 – 12.1 version, when we found in the wild exploit of the chain, the two vulnerabilities are no official patch released. So we to an Apple reported two vulnerabilities in the 7 days after the iOS release 12. 1. 4 updated version. Here's the sandbox escape...

How Safari and iMessage Have Made iPhones Less Secure

Security researchers say iOS's security woes stem in part from Apple putting too much trust in its own software's code...

Why 'Zero Day' Android Hacking Now Costs More Than iOS Attacks

Brokers of so-called zero day exploits are paying out more for Android than iOS—which would have been unthinkable until recently...

Apple iOS < 12.4.1 Privilege Escalation Vulnerability

Binary data appleios1241check.nbin...

iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects Exploit

The class NSDataFileBackedFuture can be deserialized even if secure encoding is enabled. This class is a file-backed NSData object that loads a local file into memory when the NSData bytes selector is called. This presents two problems. First, it could potentially allow undesired access to local...

iOS 12.1.3 cfprefsd Memory Corruption

// c 2019 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes // Intended only for educational and defensive purposes only. // Use at your own risk. include import include include include include include define AGENT 1 define FILLDICTCOUNT 0x600 define FILLCOUNT 0x1000 define FREECOU...

iOS 12.1.3 - 'cfprefsd' Memory Corruption

// c 2019 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes // Intended only for educational and defensive purposes only. // Use at your own risk. include import include include include include include define AGENT 1 define FILLDICTCOUNT 0x600 define FILLCOUNT 0x1000 define FREECOU...

iOS 12.1.3 - cfprefsd Memory Corruption

iOS 12.1.3 - cfprefsd Memory Corruption // c 2019 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes // Intended only for educational and defensive purposes only. // Use at your own risk. include import include include include include include define AGENT 1 define FILLDICTCOUNT 0x60...

Code injection

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...

CVE-2018-4380

CVE-2018-4380 describes a lock-screen information disclosure in iOS prior to 12.0.1, where a local attacker could view photos and contacts from the lock screen. The issue was addressed in iOS 12.0.1 by restricting options offered on a locked device. Affected versions: prior to iOS 12.0.1. Exploit...

CVE-2018-4435

CVE-2018-4435 is a kernel-level logic issue addressed by Apple across multiple platforms. According to the initial entry, the vulnerability affected iOS before 12.1.1, macOS Mojave before 10.14.2, tvOS before 12.1.1, and watchOS before 5.1.2, and was fixed by applying improved restrictions. Suppo...