CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite

CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite...

CVE-2020-9934

CVE-2020-9934 Esta Prueba de Concepto es un simple programa Swift que se otorgará a sí mismo y a Terminal todas las autorizaciones kTCCService obtenidas de tccd y luego hará cuatro cosas: Crear un archivo llamado "" en el directorio protegido por TCC Leer los datos de dicho archivo desde dentro d...

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal

CVE-2023-32407-un-macOS-TCC-bypass-en-Metal...

hm-surf

HM-Surf evaluator Evaluates susceptibility to CVE-2024-44133 of common macOS browsers. Also contains the HTML that takes a screenshot and downloads it along with location extraction. Usage - evaluator To run the evaluator, which evaluates CVE-2024-44133 on all common macOS browsers, run: python3 ...

POC

POC For research purposes only! A public collection of POCs & Exploits for the vulnerabilities I discovered. CVE-2022-22583 PackageKit : An application may be able to access restricted files SIP Bypass CVE-2022-26690 PackageKit : A malicious application may be able to modify protected parts of th...

CVE-2023-26818

Descargo de responsabilidad Este exploit ha sido creado únicamente con fines de investigación y para el desarrollo de técnicas defensivas efectivas. No está destinado a ser utilizado para actividades maliciosas o no autorizadas. El autor y el propietario del script rechazan cualquier...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Resumen ejecutivo macOS Music y TV realizan un cambio de nombre inseguro que resulta en FDA al obtener control total sobre el TCC.db del usuario Reporté este error en tickets separados para cada aplicación, no dudes en fusionarlos si corresponde. El problema subyacente es que estas aplicaciones...

CVE-2025-24204

CVE-2025-24204 About CVE-2025-24204 is a vulnerability that allows reading any process memory on SIP-enabled macOS systems. The root cause of this vulnerability stems from adding an excessively powerful entitlement com.apple.system-task-ports.read to the gcore binary. Exploiting this vulnerabilit...

CVE-2022-26726-POC

CVE-2022-26726 Versiones afectadas Como estudiante, tengo acceso limitado a dispositivos en los que puedo probar esta vulnerabilidad. Las versiones que he probado hasta ahora son MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7 y MacOS 11.6.1. La vulnerabilidad funciona en todas las versiones...

MSF-screenrecord-on-MacOS

MSF-screenrecord-on-MacOS !!! Esta vulnerabilidad ha sido descubierta o tomada simultáneamente por Sudhakar Muthumani de Primefort Private Limited, Khiem Tran y listada como CVE-2022-22600. Esto a pesar de que ya había enviado un correo a Apple sobre esto en 2021. Versiones afectadas Como...

CVE-2026-39309: User Interface (UI) Misrepresentation of Critical Information

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

CVE-2026-39309

CVE-2026-39309 affects Trilium Notes before v0.102.2. The Electron configuration allows a RunAsNode fuse to launch the app in a special Node.js mode (-e) that can execute arbitrary commands with Trilium’s permissions, enabling a local attacker to spoof macOS TCC prompts. An attacker could trigger...

EUVD-2026-31008

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

CVE-2026-39309

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

CVE-2025-15523 TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

CVE-2025-1398

Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...

CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

Libre Office TCC Bypass via Bundled Interpreter vulnerability (Dec 2025) - Mac OS X

Libre Office is prone to a tcc bypass via bundled interpreter vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-14714 TCC Bypass via Inherited Permissions in Bundled Interpreter

An Authentication Bypass vulnerability existed where the application bundled an interpreter Python that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with...