macOS>In The News

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)

CommunityNews

CommunityNews

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763).
Here are two proof-of-concepts for CVE-2022-26766 (CoreTrust allows any root certificate) and CVE-2022-26763 (IOPCIDevice::_MemoryAccess not checking bounds at all), two issues discovered by @LinusHenze and patched in macOS 12.4 / iOS 15.5.

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

View thread on forum
#macos#bugs
0 1059 0

Where Next?

View thread on forum
macos
bugs
Home macOS>In The News
#macos#bugs
0 1059 0
Last post

Popular Macos topics Top

First poster: bot
macOS>In The News

Apple pays $288,000 to white-hat hackers who had run of company’s network
arstechnica.com
#apple
1 741 0
New
First poster: bot
macOS>In The News

Apple's Nov. 10 event: What to expect and how to watch
The iPhone 12 series was just announced in October, but that’s not stopping Apple from having an event that’s expected to be a reveal for...
techrepublic.com
#apple#m1
0 869 0
New
CommunityNews
macOS>In The News

Frustrated dev drops three zero-day vulns affecting Apple iOS 15
Upset with Apple’s handling of its Security Bounty program, a bug researcher has released proof-of-concept exploit code for three zero-da...
theregister.com
#ios#apple
5 835 1
New
First poster: bot
macOS>In The News

Apple sues NSO Group to curb the abuse of state-sponsored spyware
Apple sues NSO Group to curb the abuse of state-sponsored spyware. Apple today filed a lawsuit against NSO Group to hold it accountable ...
apple.com
#apple
0 643 0
New
First poster: bot
macOS>In The News

Apple clarifies its controversial app removal emails with a clearer policy statement
Also, devs will now have 90 days to respond to a removal notice instead of 30.
arstechnica.com
#apple#controversial#emails
0 807 0
New
First poster: bot
macOS>In The News

Apple's director of machine learning resigns due to return to office work
Apple’s Director of Machine Learning Resigns Due to Return to Office Work. Apple’s director of machine learning, Ian Goodfellow, has res...
macrumors.com
#office#apple#learning
0 776 0
New
First poster: bot
macOS>In The News

Apple is not defending browser engine choice
Apple Is Not Defending Browser Engine Choice - Infrequently Noted. Alex Russell on browsers, standards, and the process of progress.
infrequently.org
#apple#browser
0 684 0
New
First poster: bot
macOS>In The News

Severe thermal throttling discovered in Apple's M2 MacBook Pro
twitter.com
#apple#macbook
0 695 0
New
First poster: bot
macOS>In The News

Why Lockdown mode from Apple is one of the coolest security ideas ever
Apple intros “extreme” optional protection against the scourge of mercenary spyware.
arstechnica.com
/security#apple
0 725 0
New
First poster: bot
macOS>In The News

Run FreeBSD 13.1 for ARM64 in QEMU on Apple Silicon Mac with HVF Acceleration
Guide: Run FreeBSD 13.1-RELEASE for ARM64 in QEMU on Apple Silicon Mac (MacBook Pro M1, etc) with HVF acceleration (Hypervisor.framework)...
gist.github.com
#apple#freebsd#arm64
0 970 0
New

Other popular topics Top

Devtalk
General Dev>Dev Chat

HELLO WORLD (Introductions thread!)
Hello Devtalk World! Please let us know a little about who you are and where you’re from :nerd_face:
#community
477 6174 114
New
Exadra37
General Dev>Hardware

What monitor(s) do you have for programming?
Please tell us what is your preferred monitor setup for programming(not gaming) and why you have chosen it. Does your monitor have eye p...
#monitors#coding#programming#development
227 10159 88
New
DevotionGeo
Backend>Chat

Would you use Erlang now when there is Elixir?
Why, if your answer is yes?
/elixir/erlang
167 4700 52
New
First poster: bot
Backend>In The News

Bit – A modernized Git CLI written in Go
github.com
/go#git
1 5741 0
New
AstonJ
Backend>Chat

Rails console using 100% CPU in dev (fix)
If you are experiencing Rails console using 100% CPU on your dev machine, then updating your development and test gems might fix the issu...
/ruby/rails
3 3971 3
New
gagan7995
Backend>Questions

Please tell me how to write a query for this in nodejs
API 4 Path: /user/following/ Method: GET Description: Returns the list of all names of people whom the user follows Response [ { ...
/nodejs
7 3258 3
New
AstonJ
Data Science

Can AI/ML predict a lottery win?
Biggest jackpot ever apparently! :upside_down_face: I don’t (usually) gamble/play the lottery, but working on a program to predict the...
#ai#machine-learning
19 3496 10
New
PragmaticBookshelf
Community>In The Spotlight

Spotlight: Jamis Buck (Author) Interview and AMA!
Author Spotlight Jamis Buck @jamis This month, we have the pleasure of spotlighting author Jamis Buck, who has written Mazes for Prog...
#author-spotlight/ruby/book-the-ray-tracer-challenge/book-mazes-for-programmers
21 5823 9
New
DevotionGeo
General Dev>Questions

Do you prefer regular mechanical keyboards or low profile mechanical keyboards and why?
I have always used antique keyboards like Cherry MX 1800 or Cherry MX 8100 and almost always have modified the switches in some way, like...
/keyboards#mechanical-keyboards
27 3339 9
New
sir.laksmana_wenk
Game Dev>Questions

I want to learn how make a game, but where should I start?
I’m able to do the “artistic” part of game-development; character designing/modeling, music, environment modeling, etc. However, I don’t...
#game-dev
14 4122 9
New
Back to top

Sponsor Spotlight

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

macOS>In The News

macOS In The News ❯

Latest on Devtalk

Devtalk ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap