CAT 
Even Apple’s Calendar app can be vulnerable
In 2022, security researcher Mikko Kenttala discovered a zero-click vulnerability within macOS Calendar that could allow attackers to add or delete files in the Calendar sandbox environment. The vulnerability allowed attackers to execute malicious code and access sensitive data stored on the victim’s device, including iCloud Photos.
The exploit starts with the attacker sending a calendar invite containing a malicious file attachment. The filename isn’t properly sanitized, which allows the attacker to perform a “directory traversal” attack, meaning they can manipulate the file’s path and place it in unintended locations.
Go Here to Read this Fast! Now patched macOS Calendar exploit let hackers steal data from iCloud
Originally appeared here:
Now patched macOS Calendar exploit let hackers steal data from iCloud
