Zero-Click Calendar invite vulnerability chain in macOS

#1

Post by jviide » Fri, Sep 13, 2024, 4:50 PM UTC

Re: Zero-Click Calendar invite vulnerability chain in macOS

#2

Post by rvz » Fri, Sep 13, 2024, 5:07 PM UTC

Great write up.

Any guess on the bounty amount for this zero-click vulnerability, with a 5 step exploit chain for macOS?

#3

Post by [deleted] » Fri, Sep 13, 2024, 5:07 PM UTC

[deleted]

#4

Post by yrcyrc » Fri, Sep 13, 2024, 5:07 PM UTC

Apple still not paying bounty or needs to be publicly reminded…

#5

Post by [deleted] » Fri, Sep 13, 2024, 5:11 PM UTC

yrcyrc wrote: post #4

Apple still not paying bounty or needs to be publicly reminded…

[deleted]

#6

Post by cyrnel » Fri, Sep 13, 2024, 5:15 PM UTC

Ah another way to mess with the quarantine flags, the other being: https://imlzq.com/apple/macos/2024/08/24/Unveiling-Mac-Secur...

Seems just way too many different systems have the ability to modify those flags.

#7

Post by languagehacker » Fri, Sep 13, 2024, 5:17 PM UTC

Super interesting, though I doubt they'll pay a bounty on something they've already fixed.

#8

Post by whitepoplar » Fri, Sep 13, 2024, 5:18 PM UTC

Does Lockdown Mode prevent this?

#9

Post by vessenes » Fri, Sep 13, 2024, 5:18 PM UTC

Don’t love the bounty state here — security researchers, is it typical to wait this long with Apple or other FAANG type companies?

#10

Post by [deleted] » Fri, Sep 13, 2024, 5:20 PM UTC

languagehacker wrote: post #7

Super interesting, though I doubt they'll pay a bounty on something they've already fixed.

[deleted]