writeups.xyz / Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS

Submitter : c2a

Date: 13 September 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Arbitrary File Write
• Arbitrary File Delete
• TCC Bypass

Programs :

• Apple (MacOS)

Authors :

• Mikko Kenttälä (@Turmio_)

Link :
https://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b