Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mac OS X and iPhone sandbox escapes

projectzero.google | blog | #sandbox-escape | #vulnerability-disclosure | #iphone | #project-zero | #mac-os-x

Summary

A Google Project Zero publication of details on Mac OS X and iPhone sandbox escape bugs after Apple shipped fixes.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
More Mac OS X and iPhone sandbox escapes and kernel bugs
A Google Project Zero rundown of sandbox escape and privilege escalation bugs in Mac OS X and iOS fixed by Apple in OS X 10.9.5 and iOS 8.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
blog · projectzero.google
Feedback and data-driven updates to Google’s disclosure policy
A Google Project Zero announcement on feedback and data-driven updates to Google's vulnerability disclosure policy.
blog · projectzero.google
pwn4fun Spring 2014 - Safari - Part II
Part two of a Google Project Zero pwn4fun series, detailing how a Safari compromise escalated from the renderer sandbox to full system access on OS X.
blog · projectzero.google
Project Zero Patch Tuesday roundup, November 2014
A Google Project Zero roundup of the November 2014 Patch Tuesday advisories covering bugs reported by the team.
research · projectzero.google
Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332
A Google Project Zero post exploiting a bug in NVIDIA's NVMAP driver (CVE-2014-5332) to escape the Chrome for Android sandbox.
back