Vulnerabilitycritical
Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-44131 | This issue was addressed with improved validation of symlinks | 5.5 | <1% | ||
| CVE-2024-44246 | The issue was addressed with improved routing of Safari-originated requests | 5.3 | 1% | ||
| CVE-2024-54529 | A logic issue was addressed with improved checks | 7.8 | <1% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Dec 12, 2024 Vulnerability / Device Security Details have emerged about a now-patched security vulnerability in Apple's iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and Control ( TCC ) framework and result in unauthorized access to sensitive information. The flaw, tracked as CVE-2024-44131 (CVSS score: 5.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.