PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-20643] Reverse engineering Apple's silent security fixes

calif.io | vulnerability | CVE-2026-20643 | #vulnerability-research | #reverse-engineering | #ios | #apple | #reversing | #safari | #cve-2026-20643 | #security-mechanisms
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Diffing a Background Security Improvement to recover the fixes Apple shipped without disclosing them.
CVE
CVE-2026-20643
Published
Collected

Related coverage

vulnerability · calif.io
[CVE-2025-31207] Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
# Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild Five apps, and what each of them does to stop you attaching a debugger. Huy Nguyen March 17, 2026 applereversing Contents 1....
research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
research · calif.io
Apple Internals: Endpoint Security ships in iOS 27.2 beta
# Apple Internals: Endpoint Security ships in iOS 27.2 beta Is antivirus coming to iPhone? Josh Maine September 18, 2026 apple Contents 1. Apple Internals: Endpoint Security ships in iOS 27.2 beta...
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · projectzero.google
Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices
Project Zero revisits Broadcom's Wi-Fi stack through Apple devices, mapping new attack surfaces and building toward a full over-the-air exploit chain against iPhones.
blog · projectzero.google
Revisiting Apple IPC: (1) Distributed Objects
Research into auditing and exploiting Apple IPC, aiming to find at least one bug in each OS X/iOS IPC mechanism, starting with Distributed Objects as an underexplored attack surface.
Back