{"id":472,"date":"2024-12-12T07:17:03","date_gmt":"2024-12-12T07:17:03","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=472"},"modified":"2024-12-13T07:17:32","modified_gmt":"2024-12-13T07:17:32","slug":"researchers-uncover-symlink-exploit-allowing-tcc-bypass-in-ios-and-macos","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2024\/12\/12\/researchers-uncover-symlink-exploit-allowing-tcc-bypass-in-ios-and-macos\/","title":{"rendered":"Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Details have emerged about a now-patched security vulnerability in Apple&#8217;s iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and Control (<a href=\"https:\/\/thehackernews.com\/2024\/10\/microsoft-reveals-macos-vulnerability.html\" rel=\"noreferrer noopener\" target=\"_blank\">TCC<\/a>) framework and result in unauthorized access to sensitive information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The flaw, tracked as&nbsp;<strong>CVE-2024-44131<\/strong>&nbsp;(CVSS score: 5.3), resides in the FileProvider component, per Apple, and has been addressed with improved validation of symbolic links (symlinks) in&nbsp;<a href=\"https:\/\/support.apple.com\/en-us\/121250\" rel=\"noreferrer noopener\" target=\"_blank\">iOS 18, iPadOS 18<\/a>, and&nbsp;<a href=\"https:\/\/support.apple.com\/en-us\/121238\" rel=\"noreferrer noopener\" target=\"_blank\">macOS Sequoia 15<\/a>.<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2024\/12\/12\/researchers-uncover-symlink-exploit-allowing-tcc-bypass-in-ios-and-macos\/\" target=\"_self\"><a href=\"https:\/\/thehackernews.com\/2024\/12\/researchers-uncover-symlink-exploit.html\">Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS<\/a><span class=\"screen-reader-text\">: Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>Details have emerged about a now-patched security vulnerability in Apple&#8217;s iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and Control (TCC) framework and result in unauthorized access to sensitive information. The flaw, tracked as&nbsp;CVE-2024-44131&nbsp;(CVSS score: 5.3), resides in the FileProvider component, per Apple, and has been&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[31],"class_list":["post-472","post","type-post","status-publish","format-standard","hentry","category-vulnerability","tag-31"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=472"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/472\/revisions"}],"predecessor-version":[{"id":473,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/472\/revisions\/473"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}