CVE-2026-116729 libfvde through 20260923 Heap Out-of-Bounds Read via libfvde_encrypted_metadata_read_type_0x001a

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XML plist data. Attackers can supply a crafted FileVault 2 volume with non-NUL-terminated plist data, causing libfvdevolumeopen to read pas...

CVE-2026-116729

Versions of libfvde up to 20260923 are susceptible to a heap out-of-bounds read vulnerability in the libfvde_encrypted_metadata_read_type_0x001a() function. The root cause is an unbounded strlen operation performed on embedded XML plist data. An attacker can provide a crafted FileVault 2 volume c...

parallels-plist-escape

parallels-plist-escape This repository contains exploits for CVE-2023-27327 and CVE-2023-27328, which can be used together to escape a Parallels Desktop virtual machine, prior to Parallels Desktop 18.1.1. It also contains code for a required kernel module, in prlmod, which can be used to send...

CVE-2022-48565-POC

CVE-2022-48565 PoC Introduction This is a Proof of Concept PoC demonstrating the vulnerability CVE-2022-48565 , which is based on unsafe deserialization of Plist files in Python. By processing specially crafted Property List Plist files, an attacker can execute arbitrary code on the target system...

osx-password-dumper

🍎 🔓 OSX Password Dumper Script Overview A bash script to retrieve user's .plist files on a macOS system and to convert the data inside it to a crackable hash format. to use with John The Ripper or Hashcat Useful for CTFs/Pentesting/Red Teaming on macOS systems. Prerequisites The script must be ru...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – XPC Service NSKeyedUnarchiver Deserialization Attack macOS/iOS simulation Program Code Python simulation !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess, socketserver, struct Mach message...

iOSForensic

iOSForensic iosForensic is a python tool to help in forensics analysis on iOS. It get files, logs, extract sqlite3 databases and uncompress .plist files in xml. Installation Simply clone this git repository and install dependencies. Dependencies Linux OpenSSH sshpass sqlite3 python = 2.6...

CVE-2026-111923

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

CVE-2026-111923

Fleet versions prior to 4.89.0 are vulnerable to an unauthenticated Denial of Service (DoS) attack due to an unbounded recursion vulnerability in the Apple MDM enrollment property list parsing . An unauthenticated attacker can send a crafted binary plist payload (approximately 150 bytes) to the e...

CVE-2026-111923 Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

EUVD-2026-103291

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

CVE-2026-111923 Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

CVE-2026-111923: Uncontrolled Recursion

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

PT-2026-116492

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.89.0 Description An unbounded recursion issue exists in the Apple MDM enrollment property list parsing. Unauthenticated attackers can crash the server by sending a crafted binary plist payload of approximately 150 byt...

Astra Linux – Vulnerability in Python 3.7

The readints function in plistlib.py in Python from version 3.9.1 is vulnerable to a potential Distributed Denial-of-Service DoS attack due to CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.7, and Pypy

A XXE issue was discovered in Python through version 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to prevent XML vulnerabilities...

SUSE CVE-2026-98226

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAPUSAGEOFFLISTBIT collision with real usage count SWAPUSAGEOFFLISTBIT is embedded in the si-inusepages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from...

EUVD-2026-93154

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAPUSAGEOFFLISTBIT collision with real usage count SWAPUSAGEOFFLISTBIT is embedded in the si-inusepages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from...

Astra Linux – Vulnerability in Python 3.11, Python 3.7

When loading a plist file, the plistlib module reads data in a size specified by the file itself. This means that a malicious file can cause out-of-memory OOM and denial-of-service DoS issues...

K000163020: Plist vulnerability CVE-2022-22912

Security Advisory Description Prototype pollution vulnerability via .parse in Plist before v3.0.4 allows attackers to cause a Denial of Service DoS and may lead to remote code execution. CVE-2022-22912 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisor...