macos_sandbox

macOS 入门 - 应用沙盒 继续我的 macOS 迁移系列博文，我想稍微讨论一下 macOS 应用沙盒。 强烈建议先阅读 macOS 应用结构 这篇博文——我会假定读者了解应用（App）与进程（任务）之间的区别，对 launchd 及其与应用启动的关系有一定了解。 沙盒示例 我第一次了解 macOS 沙盒时，天真地尝试创建一个恶意的 Word 宏。 这在 Windows 生态系统中（至今）仍然是一个非常常见的攻击向量，所以我想看看我是否能够直接启动进程并肆意破坏。 好吧，在 macOS 上事情并没有那么简单——例如，我确实能够运行进程，但似乎它们做不了太多事情。...

SnatchBox

SnatchBox SnatchBox CVE-2020-27935 是一个影响 macOS 10.15 及更早版本，以及 macOS 11.0 早期 beta 版本的沙盒逃逸漏洞。SnatchBox 最重大的影响在于，它允许恶意发布者逃逸 macOS App Store 非可选沙盒，并完全访问用户的所有文件，从而破坏了 macOS 上 App Store 的安全模型。 漏洞详情 macOS 与 iOS 不同，在 macOS 中，用户态任务自愿将自己置于沙盒之中，这样的设计本质上就存在漏洞。由于一个可能具有恶意的作者几乎完全控制该任务的内存映射和内容，而在沙盒初始化之前运行的代码（例如...

CVE-2026-14898

The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could induce the model to construct a remote image U...

PT-2026-55971

Name of the Vulnerable Software and Affected Versions OpenAI Codex for macOS affected versions not specified Description The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are...

actual Allows Electron to Run As Node

Summary A electron run as node vulnerability was identified in actual macOS application, version 25.x Electron 39.2.7. Vulnerability Type: Electron Run As Node Description ELECTRONRUNASNODE fuse enabled Electron 39.2.7 — app can be converted to Node.js REPL for arbitrary code execution Impact An...

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but noted that no user data or internal system was compromised. "Out of an abundance of caution, we are taking steps to protect the process that certifies our macO...

EUVD-2023-48734

Malicious code in bioql PyPI...

📄 Computer Mouse: Remote Control 1.1.6 Remote Code Execution

Computer Mouse: Remote Control version 1.1.6 for macOS is vulnerable to unauthenticated remote code execution via TCP port 9999. An attacker on the same network can inject simulated keyboard input, allowing arbitrary command execution without user interaction or authentication. Exploit Title:...

📄 Remote for Mac 2025.6 Remote Code Execution

Remote for Mac version 2025.6 suffers from an unauthenticated remote code execution vulnerability. Exploit Title: Remote for Mac 2025.6 - Unauthenticated RCE Date: 2025-05-26 Exploit Author: Chokri Hammedi Vendor Homepage: https://cherpake.com/ Software Link: https://cherpake.com/latest.php?os=ma...

PT-2024-28930 · Openai · Openai Chatgpt

Name of the Vulnerable Software and Affected Versions: OpenAI ChatGPT app versions prior to 2024-07-05 for macOS Description: The issue concerns the OpenAI ChatGPT app for macOS, which opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This could...

CVE-2023-25394

CVE-2023-25394 affects the Videostream macOS app (versions 0.4.3–0.5.0). The root cause is a race condition in the Updater privileged script that runs every 5 hours, during which a low-privileged attacker could influence the update process and replace update files. CERT/CC corroborates a root-pri...

TAU Threat Intelligence Notification: LamePyre (OSX)

Summary MalwareBytes researcher Adam Thomas recently discovered a malicious MacOS application masquerading as the chat app Discord that they have named “LamePyre." Although it is made to look like a typical application installer, it does not attempt to appear legitimate by running a decoy install...