Main menu

Pages

Microsoft finds a critical vulnerability in Apple's macOS

 




Apple recently addressed a security vulnerability.

Get an upgrade from the root. By doing so, the delegation to the victim's affiliate program's data.
Known as Migraine, the vulnerability was discovered by a team of security researchers at Microsoft and Apple with the identity CVE-2023-32369.


The vulnerability has been fixed in the following macOS updates by Apple, such as macOS Ventura 13.4, macOS Monterey 12.6.6, and macOS Big Sur 11.7.7. These updates were released two weeks ago on May 18th.


The macOS System Integrity Protection mechanism also prevents essential programs from modifying specific folders by imposing restrictions on the root account and its privileges within protected areas of the operating system.


In addition, the method used to run another form, to run another example, to run another example, is to run, run, run, run, run, run, and another naming. This pointer accesses a device that has already been hacked.


Microsoft researchers also determined that the attackers bypassed the root. This application makes use of a system migration bypass daemon and can protect system integrity with its com.apple.rootless.install entitlement.


She arose earlier to be involved in pregnancy-related issues in construction projects. This code has been executed. Among these risks is the creation of malware protected by System Integrity Protection, which cannot be removed using traditional removal methods.


In addition, the expansion of vulnerabilities can greatly increase the scope of attacks, as attackers can exploit these vulnerabilities to manipulate the integrity of the system by executing malware in the system kernel. In addition, attackers can install rootkits to hide malicious processes and files from security software.


Reports stated that this is not the first time that Microsoft researchers have reported security vulnerabilities in macOS in recent years. In 2021, another vulnerability was reported that allowed System Integrity Protection to be bypassed. However, it was fixed before it could be exploited by hackers.

Comments