Skeletons in the App Sandbox - 5+ Ways to Escape

Skeletons in the App Sandbox - 5+ Ways to Escape

Explore a deep dive into critical vulnerabilities in LaunchServices that compromise the App Store's sandboxing security. Uncover how attackers can exploit logic flaws to escape the App Sandbox and bypass privacy protections, even with enhanced security measures in Big Sur and Catalina. Learn about CVE-2021-30677, CVE-2021-30783, and other vulnerabilities that undermine the safety and trust promised by mandatory sandboxing requirements. Gain insights from Ron Waisberg's 23-minute Black Hat conference talk on the potential risks of installing apps without proper scrutiny, despite the perceived security of the App Store ecosystem.