Post #4217576
2026-07-29 23:12 UTC
The screensharingd bug that was killed on latest updates, is a pre-auth, contrary to what the company that disclosed it to Apple is writing. This is an amazing bug that allows to pwn any unpatched Mac that has Screen Sharing enabled. If you have it enabled go patch now. If you have old versions for which a 5T company doesn't bother to release patches, good luck!
Releasing a PoC that just allows to download any file from vulnerable machine.
https://reverse.put.as/2026/07/29/its-a-pre-auth-stupid/
Replies (1)
-
@Sobex@social.sciences.re 2026-07-30 14:15
@osxreverser@mastodon.social Would disabling Screen Sharing on unpatched mac help ? Also, how far does this vuln go back ?