Record · corpus.blog/posts/01a08c64-7c83-7149-968f-3c58277fa04c

Can You Really Trust That Permission Pop-Up On macOS? (CVE-2025-31250)

wts.dev · published 12 May 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at wts.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 27
Words captured: 4,544

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://support.apple.com/en-us/100100

support.apple.com

https://book.hacktricks.wiki/en/macos-hardening/macos-security-and-privilege-escalation/macos-security-protections/macos-tcc/macos-tcc-bypasses/index.html

book.hacktricks.wiki

SQL Injection in TCC: and why it (probably) wasn't a security risk (this time) Read at the source ↗

wts.dev

https://developer.apple.com/documentation/xpc

developer.apple.com

https://www.google.com/search?&q=site:developer.apple.com+%22apple+events%22&udm=14

google.com

https://developer.apple.com/library/archive/documentation/mac/pdf/Interapplication_Communication/Intro_to_Apple_Events.pdf

developer.apple.com

https://www.google.com/search?q=inurl:https://developer.apple.com/library/archive/documentation/mac/pdf/Interapplication_Communication&udm=14

google.com

https://developer.apple.com/library/archive/documentation/mac/pdf/Interapplication_Communication/Scripting_Components.pdf

developer.apple.com

https://www.amazon.com/Inside-Macintosh-Interapplication-Communication-Technical/dp/0201622009

amazon.com

https://en.wikipedia.org/wiki/Classic_Mac_OS

en.wikipedia.org

https://developer.apple.com/library/archive/documentation/LanguagesUtilities/Conceptual/MacAutomationScriptingGuide/HowMacScriptingWorks.html

developer.apple.com

https://developer.apple.com/library/archive/documentation/AppleScript/Conceptual/AppleScriptLangGuide/introduction/ASLR_intro.html

developer.apple.com

https://en.wikipedia.org/wiki/JavaScript_OSA

en.wikipedia.org

https://en.wikipedia.org/wiki/Windows_Script_Host

en.wikipedia.org

https://www.youtube.com/watch?v=Nlnuk8W2A0Y

youtube.com

https://developer.apple.com/videos/play/wwdc2019/701/?time=2195

developer.apple.com

https://www.rainforestqa.com/blog/macos-tcc-db-deep-dive

rainforestqa.com

https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/

microsoft.com

https://developer.apple.com/documentation/appkit/nsworkspace/runningapplications

developer.apple.com

https://developer.apple.com/documentation/appkit/nsworkspace/frontmostapplication

developer.apple.com

https://medium.com/@mattshockl/cve-2020-9934-bypassing-the-os-x-transparency-consent-and-control-tcc-framework-for-4e14806f1de8

medium.com

http://x.com/mattshockl/status/1480612268857507841

x.com

Change home directory and bypass TCC aka CVE-2020-27937 Read at the source ↗

wojciechregula.blog

https://www.microsoft.com/en-us/security/blog/2022/01/10/new-macos-vulnerability-powerdir-could-lead-to-unauthorized-user-data-access/

microsoft.com

https://developer.apple.com/library/archive/qa/qa1906/_index.html

developer.apple.com

https://it-training.apple.com/tutorials/support/sup125/

it-training.apple.com

TCCing is Believing: Apple finally adds TCC events to Endpoint Security! Read at the source ↗

objective-see.org