Do Son A critical flaw (CVSS 9.8) in macOS file copy APIs allows apps to bypass sandboxing and TCC protections to access protected user data. A PoC is public.
macOS vulnerability
Microsoft uncovers CVE-2025-31191, a macOS sandbox escape exploiting security-scoped bookmarks. Apple patched it in March 2025.
Discover the Zero-Click Calendar Invite vulnerability in macOS, exposing millions of users to potential remote code execution.
A security researcher has published details and proof-of-concept (PoC) code for a macOS vulnerability (CVE-2023-42942)