CVE List
| CVEs | Platforms | Vendors | Products | Classifications |
|---|---|---|---|---|
| CVE-2022-3155 | macOS | Mozilla | Thunderbird | Gatekeeper bypass |
| CVE-2022-3421 | macOS | Google Drive for Desktop | LPE | |
| CVE-2022-28768 | macOS | Zoom | Zoom for macOS Installers | LPE |
| CVE-2022-42789 | macOS | Apple | macOS | TCC bypass |
| CVE-2023-21611 | macOS | Adobe | Adobe Acrobat Reader | LPE |
| CVE-2023-21612 | macOS | Adobe | Adobe Acrobat Reader | LPE |
| CVE-2023-23533 | macOS | Apple | macOS | SIP bypass |
| CVE-2023-24930 | macOS | Microsoft | OneDrive | LPE |
| CVE-2023-28261 | macOS | Microsoft | Microsoft Edge (Chromium-based) | LPE |
| CVE-2023-28596 | macOS | Zoom | Zoom for macOS Installers | LPE |
Talks
| Conferences | Titles |
|---|---|
| Black Hat EU 2020 | Jack-in-the-Cache: A New Code injection Technique through Modifying X86-to-ARM Translation Cache |
| CODE BLUE 2021 | Appearances are deceiving: Novel offensive techniques in Windows 10/11 on ARM |
| Black Hat Asia 2023 | Dirty Bin Cache: A New Code Injection Poisoning Binary Translation Cache |