hacker-news · Crawled Nov 11, 2026
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
1 CVEs
Read original article ↗
AI Summary
Apple has released security updates to address multiple vulnerabilities, including two in iMessage that could allow a remote attacker to join a group chat and access messages sent prior to their addition. The vulnerabilities, tracked as CVE-2026-113961 and CVE-2026-113960, stem from authorization issues and were fixed through improved validation. Additionally, a Brotli compression library out-of-bounds write vulnerability (CVE-2026-111497) was patched, which could allow memory corruption from malicious input, and several Bluetooth and AirPlay flaws were resolved that could enable unauthorized pairing or memory corruption.
AI-extracted · verify before operational use
Extracted Entities 1 found
MITRE ATT&CK TTPs 7 techniques
T1055 Process Injection · Defense Evasion T1068 Exploitation for Privilege Escalation · Privilege Escalation T1070.004 File Deletion · Defense Evasion T1203 Exploitation for Client Execution · Execution T1210 Exploitation of Remote Services · Lateral Movement T1498 Network Denial of Service · Impact T1499 Endpoint Denial of Service · Impact