DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Pardon MIE?

Quality: 9/10 Relevance: 9/10

Summary

In-depth analysis of Apple's Memory Integrity Enforcement (MIE) and a public bypass (CVE-2026-28952) affecting macOS on Apple Silicon. The piece explains how a 64-bit integer overflow in _zalloc_ro_mut allows an attacker to spill bytes into the RO zone and flip a ucred cr_uid to 0, effectively achieving local root before patch cadence closes the door. It also covers the two-instruction fix, defender implications, and how attackers might chain this with userland primitives.

🚀 Service construit par Johan Denoyer