InfoSecBulletin Cybersecurity for mankind
A PoC code has been released for the a serious vulnerability, CVE-2023-41974, on iOS and macOS. This vulnerability can be used to gain full control of a mobile device by exploiting a critical issue in the kernel, giving an application access to run any code with kernel privileges.
This discovery is based on Félix Poulin-Bélanger’s research, which uncovered a way to combine multiple flaws in the kernel. Poulin-Bélanger demonstrated these vulnerabilities and publicly shared the technical details of how he found and exploited the vulnerability.
Delay patching leaves about 50,000 Fortinet firewalls to zero-day attack
Daily Security Update Dated: 21.01.2025
126 Linux kernel Vulns Allow Attackers Exploit 78 Linux Sub-Systems
CERT-UA alerts about “security audit” requests through AnyDesk
Oracle Critical Pre-Release update addressed 320 flaw
OWASP Reveils Top 10 Smart Contract Vulnerabilities for 2025
Multiple Azure DevOps Vulns Allow To Inject CRLF Queries & Rebind DNS
Intel holds 22 employees from one Bangladeshi University
VPN Surge 1500% in USA after TikTok Shut Down
MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology
Poulin-Bélanger received $70,000 from the Apple Security Bounty program for his groundbreaking work. This encourages researchers worldwide to explore cybersecurity further.
The exploit was tested on the latest Apple devices like the iPhone 14 Pro Max and the MacBook Air M2 2022, showing how far-reaching and impactful this vulnerability is. The Proof-of-Concept (PoC) exploit demonstrates the CVE-2023-41974 flaw, giving a practical insight into this security breach.
Poulin-Bélanger has created a GitHub repository called kfd (kernel file descriptor) where he has shared his extensive research on the kernel memory of Apple devices. The kfd project aims to read and write kernel memory. on Apple devices.
It uses different vulnerabilities, specifically the exploitation of dangling PTEs (Page Table Entries), which are called PUAF (physical use-after-free) primitive. This new method reallocates certain kernel objects within these physical pages and directly manipulates them from user space through the dangling PTEs to achieve a KRKW (kernel read/write) primitive. The project is contained in the libkfd library and includes executable wrappers for both iOS and macOS.
