Shulou(Shulou.com)11/24 Report--

CTOnews.com May 31, Microsoft today released a blog post saying that a vulnerability called "Migraine" has been found in its macOS system and has alerted Apple.

Microsoft said in a blog post that attackers with root-level privileges could use the vulnerability to "automatically bypass" system integrity protection (System Integrity Protection, or SIP) and perform arbitrary actions.

In its blog post, Microsoft outlines the ways in which attackers exploit SIP vulnerabilities, and describes in detail the discovery process, utilization methods and negative effects.

Another feature of this vulnerability is its support for remote operations, which means that attackers can cooperate with other vulnerabilities to bring more damage.

Microsoft said that simply fixing Migration Assistant will not effectively deter attackers from exploiting the vulnerability, and attackers can use AppleScript to take advantage of a specially crafted Time Machine backup file run vulnerability.

Apple has fixed these vulnerabilities in the macOS Ventura 13.4 update released on May 18, so users are recommended to upgrade as soon as possible. CTOnews.com is attached with a link to Microsoft's detailed description of the vulnerability, which can be read by interested users.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.