CVE-2023-26818

Related Files

Telegram On macOS TCC Bypass

Posted May 16, 2023

Authored by Dan Revah | Site danrevah.github.io

This article focuses on a weakness in the Telegram application on macOS that allows for the injection of a Dynamic Library (or Dylib for short). The article will cover several basic concepts in macOS to provide the relevant background that will help the reader understand the process of identifying the weakness and writing an exploit that will gain a local privilege escalation by getting access to the camera through the permissions that were previously granted to the Telegram application.

tags | exploit, local

advisories | CVE-2023-26818

SHA-256 | ff2c92c6de4309a150cf45e77231bdbfd2d4e121543c5abfa55fd4e59bdc5704

Download | Favorite | View