CommunityNews

CommunityNews

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)

Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763).
Here are two proof-of-concepts for CVE-2022-26766 (CoreTrust allows any root certificate) and CVE-2022-26763 (IOPCIDevice::_MemoryAccess not checking bounds at all), two issues discovered by @LinusHenze and patched in macOS 12.4 / iOS 15.5.

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

Where Next?

Popular Macos topics Top

New
First poster: davearonson
Run MacOS Software On Linux Using Darling - OSTechNix. Darling is a translation layer that allows us to run macOS applications on Linux....
New
New
First poster: Maartz
An Ode to Apple’s Hide My Email. Apple’s Hide My Email feature is one of the most under-rated privacy launches of the past year, and her...
New
First poster: bot
Apple’s macOS Ventura | 7 New Security Changes to Be Aware Of. With macOS 13, Apple have made some bold and potentially disruptive chang...
New
First poster: bot
Apple Music has quietly increased the price of its student plan in the United States, Canada and the United Kingdom. In the United States...
New
First poster: bot
Google’s decision to block the Truth Social app’s launch on the Play Store over content moderation issues raises the question as to why A...
New
First poster: bot
Apple refuses to cooperate with U.S. government agency seeking information on its funding of, and influence over, ACT | The App(le) Assoc...
New
First poster: bot
Friday Facts #371 - Apple Silicon | Factorio. Today, I’m here to share some exciting non-expansion news for our Mac players. Factorio ...
New
CommunityNews
Coding Intelligence New Features Claude in Xcode is now available in the Intelligence settings panel, allowing users to seamlessly add t...
New

Other popular topics Top

Devtalk
Hello Devtalk World! Please let us know a little about who you are and where you’re from :nerd_face:
New
PragmaticBookshelf
Take your Go skills to the next level by learning how to design, develop, and deploy a distributed service. Start from the bare essential...
New
DevotionGeo
I know that -t flag is used along with -i flag for getting an interactive shell. But I cannot digest what the man page for docker run com...
New
AstonJ
Thanks to @foxtrottwist’s and @Tomas’s posts in this thread: Poll: Which code editor do you use? I bought Onivim! :nerd_face: https://on...
New
AstonJ
Just done a fresh install of macOS Big Sur and on installing Erlang I am getting: asdf install erlang 23.1.2 Configure failed. checking ...
New
foxtrottwist
A few weeks ago I started using Warp a terminal written in rust. Though in it’s current state of development there are a few caveats (tab...
New
AstonJ
We’ve talked about his book briefly here but it is quickly becoming obsolete - so he’s decided to create a series of 7 podcasts, the firs...
New
New
PragmaticBookshelf
Author Spotlight: Peter Ullrich @PJUllrich Data is at the core of every business, but it is useless if nobody can access and analyze ...
New
CommunityNews
Open-source implementation of the classic GTA engine now running directly in your browser. Experience the reVC technology demo on DOS.Zon...
New