CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking ¿Qué es? Una aplicación atacante y una aplicación víctima para practicar la vulnerabilidad CVE-2021-33699 Task Hijacking. Referencia https://naro-security.tistory.com/55...

Android-Disassembler

Android-Disassembler CodeFactor 在你的手机上分析恶意应用 维护状态 维护工作已恢复，但项目仍处于恢复和现代化阶段。 构建前需要先初始化 Git 子模块。 在现代化 Android 上，默认的打开/导入/导出流程现在优先使用 SAF 契约。 高级导入 是为需要 root、原始文件系统和已安装应用浏览的高级用户提供的独立路径。 QUERYALLPACKAGES 保留用于高级用户的已安装应用来源，而非默认的 SAF 流程。 问题分类和维护文档位于 docs/maintenance/ 下。 存储模型 选择文件 使用 Android 的 SAF 文档选择器。 导出项...

ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Android前台服务权限提升漏洞分析 漏洞背景 在AOSP的2020-08补丁中，披露了一个框架层AMS中的漏洞，编号为CVE-2020-0108，评级为高，另一个编号为CVE-2020-0313，评级为中。AMS中对前台服务的处理中逻辑漏洞，成功利用该漏洞的攻击者可以绕过前台服务的通知显示并持续在后台运行。攻击需要由本地的恶意应用发起，不需要用户交互，如果用户授予了应用其它权限，可造成更大的危害，例如在持续追踪位置或静默录音等。 前台服务是Google在Android...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-65381

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

EUVD-2026-77936

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-84586

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information...

CVE-2026-65354

A permissions issue in Apple's operating systems allows a malicious application to potentially break out of its sandbox . This vulnerability has been addressed with additional restrictions and is officially fixed in iOS 27 , iPadOS 27 , and macOS Golden Gate 27 . While the vulnerability is confir...

CVE-2026-65381

CVE-2026-65381 affects AppleMobileFileIntegrity and CoreTypes components in macOS. The root cause is a validation issue in entitlement verification , addressed by improved validation of the process entitlement. The impact is that a malicious app may break out of its sandbox , potentially gaining ...

CVE-2026-86911

A vulnerability in macOS (specifically versions Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 ) allows a malicious application to bypass clickjacking protections for secure prompts. The root cause is attributed to issues with state management . This vulnerability can lead to unauthorized access ...

EUVD-2026-77986

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-43689

A permissions issue in Apple operating systems allows a malicious application to potentially gain root privileges . This vulnerability affects iOS , iPadOS , macOS , and visionOS . The issue has been addressed by implementing additional restrictions . The fix is available in iOS 26.7 , iPadOS 26....

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. A malicious application may be able to leak sensitive user information...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.212, using “after free” in Google Chrome’s payments functionality allowed an attacker who convinced a user to install a malicious payment app to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. Chromium security severity: Medium...

PT-2026-91577

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A malicious application may be able to determine...