Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)
fedilink
2
Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)
fedilink
Here are two proof-of-concepts for CVE-2022-26766 (CoreTrust allows any root certificate) and CVE-2022-26763 (IOPCIDevice::_MemoryAccess not checking bounds at all), two issues discovered by @LinusHenze and patched in macOS 12.4 / iOS 15.5.
Create a post

Confidentiality Integrity Availability

  • 0 users online
  • 1 user / day
  • 3 users / week
  • 12 users / month
  • 41 users / 6 months
  • 2 subscribers
  • 168 Posts
  • 178 Comments
  • Modlog