{"metadata": {"vulnerability": "cve-2022-26706", "count": 59, "kinds": {"milestone": 7, "sighting": 15, "kev": 0, "other": 37}}, "data": [{"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-26706", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-16T00:00:00Z", "date_only": false, "value": "2022-05-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.7.date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "last_revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "last_revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "initial_release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "initial_release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-17T16:57:57Z", "date_only": false, "value": "2022-05-17T16:57:57", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.5.date"}, {"timestamp": "2022-05-17T16:58:15Z", "date_only": false, "value": "2022-05-17T16:58:15", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-05-17T16:59:42Z", "date_only": false, "value": "2022-05-17T16:59:42", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-05-17T17:06:32Z", "date_only": false, "value": "2022-05-17T17:06:32", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-05-17T17:06:48Z", "date_only": false, "value": "2022-05-17T17:06:48", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.6.date"}, {"timestamp": "2022-05-26T00:00:00Z", "date_only": false, "value": "2022-05-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-05-26T18:44:31Z", "date_only": false, "value": "2022-05-26T18:44:31.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-26706", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-26T18:44:31Z", "date_only": false, "value": "2022-05-26T18:44:31.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "cve-2022-26706", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-26T19:15:00Z", "date_only": false, "value": "2022-05-26T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6HWH-28C3-73R8", "record": "GHSA-6HWH-28C3-73R8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-26T19:15:00Z", "date_only": false, "value": "2022-05-26T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26706", "record": "GSD-2022-26706", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-05-26T19:15:08.187Z", "date_only": false, "value": "2022-05-26T19:15:08.187000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.8.date"}, {"timestamp": "2022-05-26T19:15:08.187Z", "date_only": false, "value": "2022-05-26T19:15:08.187", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26706", "record": "FKIE_CVE-2022-26706", "field": "published"}, {"timestamp": "2022-05-27T00:00:35Z", "date_only": false, "value": "2022-05-27T00:00:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6HWH-28C3-73R8", "record": "GHSA-6HWH-28C3-73R8", "field": "published"}, {"timestamp": "2022-06-07T00:00:00Z", "date_only": false, "value": "2022-06-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-06-07T21:19:00Z", "date_only": false, "value": "2022-06-07T21:19Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26706", "record": "GSD-2022-26706", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-06-08T00:00:31Z", "date_only": false, "value": "2022-06-08T00:00:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6HWH-28C3-73R8", "record": "GHSA-6HWH-28C3-73R8", "field": "modified"}, {"timestamp": "2022-07-13T18:11:34Z", "date_only": false, "value": "2022-07-13T18:11:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/55357", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "4a8e12f0-7a30-409f-8a6e-b88ff659e305", "content": "Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706\n\nhttps://ift.tt/i6KPUr8", "url": "https://t.me/ctinow/55357"}, {"timestamp": "2022-07-13T20:50:48Z", "date_only": false, "value": "2022-07-13T20:50:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/12735", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "bc714647-d3bd-4d92-a711-fc9dc4be8f33", "content": "Latest news and stories from BleepingComputer.com\nMicrosoft releases tweet-size exploit for macOS sandbox escape bug\n\nOn macOS systems that don't have Apple's recent security updates, a vulnerability identified as CVE-2022-26706 could help an attacker bypass sandbox restrictions to execute code with elevated privileges. [...]", "url": "https://t.me/BleepingComputer/12735"}, {"timestamp": "2022-07-13T21:19:03Z", "date_only": false, "value": "2022-07-13T21:19:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BleepingComputer/12736", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "4ee787e3-2d4c-4188-ba64-6247937bef13", "content": "Microsoft releases tweet-size exploit for macOS sandbox escape bug\n\nOn macOS systems that don't have Apple's recent security updates, a vulnerability identified as CVE-2022-26706 could help an attacker bypass sandbox restrictions to execute code with elevated privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/security/microsoft-releases-tweet-size-exploit-for-macos-sandbox-escape-bug/", "url": "https://t.me/BleepingComputer/12736"}, {"timestamp": "2022-07-14T13:07:20Z", "date_only": false, "value": "2022-07-14T13:07:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6398", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "e790db6d-6b11-43df-b1c8-f61a33e15b6e", "content": "#exploit\n1. Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706\nhttps://www.microsoft.com/security/blog/2022/07/13/uncovering-a-macos-app-sandbox-escape-vulnerability-a-deep-dive-into-cve-2022-26706\n\n2. CVE-2022-23631:\nRCE via Prototype Pollution in Blitz.js\nhttps://blog.sonarsource.com/blitzjs-prototype-pollution", "url": "https://t.me/CyberSecurityTechnologies/6398"}, {"timestamp": "2022-07-14T15:44:23Z", "date_only": false, "value": "2022-07-14T15:44:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/3174", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "8aad7179-8f4a-4c42-bcfa-1c3301249c06", "content": "\u034fMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 PoC \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0441 \u0442\u0432\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Apple \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 macOS \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430 (Big Sur 11.6.6).\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2022-26706, \u043f\u043e\u044f\u0441\u043d\u0438\u0432, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f macOS, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043c\u0430\u043a\u0440\u043e\u043a\u043e\u0434\u0443 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Word \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435.\n\n\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0440\u043e\u0441\u0430\u043c\u0438 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Office \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u043e\u0439 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c Windows. \u041a\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043c\u0430\u043a\u0440\u043e\u0441\u043e\u0432 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Office \u043d\u0430 macOS.\n\n\u0418\u0437\u0443\u0447\u0438\u0432 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u043e\u0442\u0447\u0435\u0442\u044b (1, 2) \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b macOS, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u044b Microsoft 365 Defender \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Launch Services \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u00a0\u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00a0open \u2013stdin\u00a0\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 Python \u0441 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u043c \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c \u00ab~$\u00bb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 macOS.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 PoC c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0\u043e\u043f\u0446\u0438\u0438\u00a0-stdin \u0434\u043b\u044f\u00a0\u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f\u00a0\u0444\u0430\u0439\u043b\u0430 Python, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 com.apple.quarantine.\n\n\u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u0436\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0436\u0430\u0442\u044c \u0435\u0433\u043e \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b\u0441\u044f \u0432 \u0442\u0432\u0438\u0442, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0432\u0438\u0434\u0435\u0442\u044c \u043d\u0438\u0436\u0435 \ud83d\udc47", "url": "https://t.me/true_secator/3174"}, {"timestamp": "2022-07-14T16:54:09Z", "date_only": false, "value": "2022-07-14T16:54:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BleepingComputer/12747", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "a357089b-50eb-4315-9837-f60cb39781cc", "content": "Latest news and stories from BleepingComputer.com\nMicrosoft releases PoC exploit for macOS sandbox escape vulnerability\n\nOn macOS systems that don't have Apple's recent security updates, a vulnerability identified as CVE-2022-26706 could help an attacker bypass sandbox restrictions to execute code with elevated privileges. [...]", "url": "https://t.me/BleepingComputer/12747"}, {"timestamp": "2022-07-14T22:04:41Z", "date_only": false, "value": "2022-07-14T22:04:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/12635", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "310fc5f7-dcf8-4e8a-a1a3-aed6a3eaf312", "content": "Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b macOS\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0430 \u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Apple. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u044d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043a\u0438\u043d\u0443\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\nhttps://xakep.ru/2022/07/14/cve-2022-26706-poc/", "url": "https://t.me/xakep_ru/12635"}, {"timestamp": "2022-07-15T13:58:09Z", "date_only": false, "value": "2022-07-15T13:58:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/1008", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "b1028ee5-3058-4e3c-8137-d82cd8510400", "content": "\u200b\ud83d\udcbb \u0412 macOS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0432\u0438\u0442-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\ud83d\udcac Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 macOS. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2022-26706 \u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f macOS, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043c\u0430\u043a\u0440\u043e\u043a\u043e\u0434\u0443 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Word \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435.\n\n\u00ab\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043d\u0430\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\u00bb, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435\u00bb, \u2014 \u043d\u0430\u043f\u0438\u0441\u0430\u043b\u0430 Microsoft \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n\u0414\u0436\u043e\u043d\u0430\u0442\u0430\u043d \u0411\u0430\u0440 \u041e\u0440 \u0438\u0437 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Microsoft 365 Defender \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043c\u0430\u043a\u0440\u043e\u0441\u043e\u0432 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Microsoft Office \u043d\u0430 macOS.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u043c \u043e\u0442\u0447\u0435\u0442\u0430\u043c, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u00abopen \u2013stdin\u00bb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 macOS \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0410 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u00ab-stdin\u00bb \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 \u00abcom.apple.quarantine\u00bb .\n\n\u00abPython \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043d\u0430\u0448 \u043a\u043e\u0434, \u0430 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0437\u0430\u043f\u0443\u0441\u043a\u0430, \u043e\u043d \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d \u043a \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Word\u00bb, \u2014 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0414\u0436\u043e\u043d\u0430\u0442\u0430\u043d \u041e\u0440 \u0411\u0430\u0440.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u0436\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0436\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 \u0432\u044b\u0448\u0435 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b\u0441\u044f \u0432 \u0440\u0430\u0437\u043c\u0435\u0440 \u0442\u0432\u0438\u0442\u0430. Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Apple \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 macOS \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430 (Big Sur 11.6.6). \u041d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u0440\u0441\u0435\u043d\u0438\u0439 \u041a\u043e\u0441\u0442\u0440\u043e\u043c\u0438\u043d \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0440\u0430\u043d\u044c\u0448\u0435.\n\n#macOS #\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 #Microsoft #Apple\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/1008"}, {"timestamp": "2022-08-16T22:00:00Z", "date_only": false, "value": "2022-08-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-09-20T22:00:00Z", "date_only": false, "value": "2022-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-09-22T22:00:00Z", "date_only": false, "value": "2022-09-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-09-25T16:45:01Z", "date_only": false, "value": "2022-09-25T16:45:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/2472", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "6c0980c4-c773-4664-bf23-5d0015734c87", "content": "\u034fMicrosoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 PoC \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0441 \u0442\u0432\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Apple \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 macOS \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430 (Big Sur 11.6.6).\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2022-26706, \u043f\u043e\u044f\u0441\u043d\u0438\u0432, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f macOS, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043c\u0430\u043a\u0440\u043e\u043a\u043e\u0434\u0443 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Word \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435.\n\n\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0440\u043e\u0441\u0430\u043c\u0438 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Office \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u043e\u0439 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c Windows. \u041a\u0430\u043a \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043c\u0430\u043a\u0440\u043e\u0441\u043e\u0432 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 Office \u043d\u0430 macOS.\n\n\u0418\u0437\u0443\u0447\u0438\u0432 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u043e\u0442\u0447\u0435\u0442\u044b (1, 2) \u043e \u0432\u044b\u0445\u043e\u0434\u0435 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b macOS, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u044b Microsoft 365 Defender \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Launch Services \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u00a0\u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00a0open \u2013stdin\u00a0\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 Python \u0441 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u043c \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c \u00ab~$\u00bb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 macOS.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 PoC c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0\u043e\u043f\u0446\u0438\u0438\u00a0-stdin \u0434\u043b\u044f\u00a0\u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f\u00a0\u0444\u0430\u0439\u043b\u0430 Python, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 com.apple.quarantine.\n\n\u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0430\u0436\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0436\u0430\u0442\u044c \u0435\u0433\u043e \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b\u0441\u044f \u0432 \u0442\u0432\u0438\u0442, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0432\u0438\u0434\u0435\u0442\u044c \u043d\u0438\u0436\u0435 \ud83d\udc47", "url": "https://t.me/S_E_Reborn/2472"}, {"timestamp": "2022-09-25T22:00:00Z", "date_only": false, "value": "2022-09-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-10-19T12:14:46Z", "date_only": false, "value": "2022-10-19T12:14:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2369", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "7db3794a-3643-4472-90cf-9814c50f2f41", "content": "Microsoft has disclosed details of a now-patched vulnerability (CVE-2022-26706) in Apple operating systems \u2014 iOS, iPadOS, macOS, tvOS and watchOS \u2014 that could allow attackers to escalate privileges and deploy malware.\n\nRead: https://thehackernews.com/2022/07/microsoft-details-app-sandbox-escape.html", "url": "https://t.me/thehackernews/2369"}, {"timestamp": "2022-11-21T23:00:00Z", "date_only": false, "value": "2022-11-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_release_date.data.1.date"}, {"timestamp": "2023-08-21T05:07:00Z", "date_only": false, "value": "2023-08-21T05:07:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-11-12T02:29:52Z", "date_only": false, "value": "2023-11-12T02:29:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/105", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "3fe2c6fd-241c-420d-b4e8-0f3d4c7a2f0e", "content": "#ExploitObserverAlert\n\nCVE-2022-26706\n\nDESCRIPTION: Exploit Observer has 10 entries related to CVE-2022-26706. An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.\n\nFIRST-EPSS: 0.000730000\nNVD-IS: 3.6\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/105"}, {"timestamp": "2023-12-13T01:19:38.977Z", "date_only": false, "value": "2023-12-13T01:19:38.977370Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26706", "record": "GSD-2022-26706", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:11:44.450Z", "date_only": false, "value": "2024-08-03T05:11:44.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-26706", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:11:44.450Z", "date_only": false, "value": "2024-08-03T05:11:44.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-26706", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:33:27.405Z", "date_only": false, "value": "2024-08-15T17:33:27.405+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-21T06:54:21.300Z", "date_only": false, "value": "2024-11-21T06:54:21.300000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-11-23T21:31:28.463Z", "date_only": false, "value": "2024-11-23T21:31:28.463000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202205-1302", "record": "VAR-202205-1302", "field": "last_update_date"}, {"timestamp": "2026-06-17T04:35:39.793Z", "date_only": false, "value": "2026-06-17T04:35:39.793", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26706", "record": "FKIE_CVE-2022-26706", "field": "lastModified"}, {"timestamp": "2026-09-01T20:01:12.704Z", "date_only": false, "value": "2026-09-01T20:01:12.704159Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81265", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "9df36b98-605b-4e75-ac84-a44aa8d1a5fc", "url": "https://t.me/hacking_Attack/81265"}, {"timestamp": "2026-09-01T20:01:34.701Z", "date_only": false, "value": "2026-09-01T20:01:34.701962Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/61398", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "3a94d9c8-7217-4438-8de9-7702457c77f9", "url": "https://t.me/hacking_Attack/61398"}, {"timestamp": "2026-09-05T02:00:05.395Z", "date_only": false, "value": "2026-09-05T02:00:05.395829Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81265", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "d789b122-9b5f-4a6f-bb70-6090010a25b4", "url": "https://t.me/hacking_Attack/81265"}, {"timestamp": "2026-09-05T15:00:06.448Z", "date_only": false, "value": "2026-09-05T15:00:06.448253Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/61398", "record": "CVE-2022-26706", "field": "creation_timestamp", "uuid": "ca73f18d-4612-44f7-b093-5043fd13ef7e", "url": "https://t.me/hacking_Attack/61398"}]}