Get the latest tech news
CVE-2025-24259: Leaking Bookmarks on macOS
A security research blog.
A Mach message include a kernel-appended trailer, which contains (among other things) an audit token that can be used by the receiver to uniquely identify the sending process and read its entitlements. In my previous write-up, I mimicked client code to send Mach messages to a daemon that didn't check entitlements, allowing me to access restricted resources. Now, parentalcontrolsd will ignore clients that don't have the com.apple.private.parentalcontrols entitlement key with a boolean value of true when they try to call that specific MIG routine to copy Safari bookmarks.
Or read this on Hacker News
