corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08c64-7c83-7149-968f-3c582580b2eb

DirtyDict: Escaping the macOS Sandbox and wrecking havoc

wts.dev · published 18 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at wts.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
35
Words captured
2,679

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://developer.apple.com/documentation/security/app-sandbox
developer.apple.com
https://developer.apple.com/documentation/foundation/nsspellserver
developer.apple.com
https://developer.apple.com/documentation/appkit/nsspellchecker
developer.apple.com
http://www.trustedbsd.org/mac.html
trustedbsd.org
CVE-2025-43253: Bypassing Launch Constraints on macOS Read at the source ↗
wts.dev
http://en.wikipedia.org/wiki/Scheme_(programming_language
en.wikipedia.org
https://www.mdsec.co.uk/2018/08/escaping-the-sandbox-microsoft-office-on-macos/
mdsec.co.uk
https://apps.apple.com/us/app/microsoft-word/id462054704
apps.apple.com
https://developer.apple.com/documentation/foundation/nsspellserver/registerlanguage(_:byvendor:
developer.apple.com
https://developer.apple.com/library/archive/documentation/Cocoa/Conceptual/DistrObjects/DistrObjects.html
developer.apple.com
https://developer.apple.com/documentation/foundation/nsconnection
developer.apple.com
https://developer.apple.com/documentation/foundation/nsxpcconnection
developer.apple.com
https://developer.apple.com/forums/thread/772895?answerId=821961022
developer.apple.com
https://electronjs.org/
electronjs.org
I wrote an Objective-C bridge for Node.js. Don't use it. Read at the source ↗
wts.dev
https://x.com/wtsdev/status/2000610949015736651
x.com
ELECTRONizing macOS privacy Read at the source ↗
wojciechregula.blog
https://x.com/theo/status/1926492374072434895
x.com
https://www.microsoft.com/en-us/security/blog/2022/07/13/uncovering-a-macos-app-sandbox-escape-vulnerability-a-deep-dive-into-cve-2022-26706/
microsoft.com
https://effective-shell.com/part-5-building-your-toolkit/configuring-the-shell/
effective-shell.com
https://attack.mitre.org/techniques/T1546/004/
attack.mitre.org
https://attack.mitre.org/techniques/T1564/003/
attack.mitre.org
https://developer.apple.com/documentation/bundleresources/information-property-list/lsuielement
developer.apple.com
https://gist.github.com/nmggithub/770838bf196265cf23ae01d5ff92e436
gist.github.com
https://x.com/patch1t
x.com
https://jhftss.github.io/cvelist/
jhftss.github.io
https://www.cve.org/CVERecord?id=CVE-2023-32444
cve.org
https://github.com/jhftss/POC/tree/46f04f5f9ba13f646edf8bcc1c7e5987dd740412/CVE-2023-32444
github.com
https://www.cve.org/CVERecord?id=CVE-2024-27887
cve.org
https://developer.apple.com/documentation/xcode/accessing-app-group-containers
developer.apple.com
https://www.cve.org/CVERecord?id=CVE-2025-43266
cve.org
https://www.cve.org/CVERecord?id=CVE-2025-43190
cve.org
https://www.cve.org/CVERecord?id=CVE-2025-43469
cve.org
https://www.cve.org/CVERecord?id=CVE-2025-43518
cve.org
https://x.com/theevilbit/status/1995752897116508668
x.com