iOS 27.2 Sandbox Escape Vulnerability Disclosed (Including 27.3 Beta)
On November 8, forcequitOS released a zero-day sandbox escape PoC named worse_query, supporting iOS 26.0–26.7.2 and 27.2 (including 27.3 beta). It allows access to system paths and modification of app data. This vulnerability, succeeding bad_query, requires an App Group configuration. The author emphasizes it is for development and research only, unrelated to jailbreaking. The flaw has been submitted to Apple for review but remains unpatched. Tools like GestaltX based on this vulnerability have…
iOS 27.2 Sandbox Escape Vulnerability Publicly Disclosed (Including 27.3 Beta)
On November 8, forcequitOS released a zero-day sandbox escape PoC named worse_query, which supports iOS 26.0–26.7.2 and 27.2 (including 27.3 beta). It allows access to system paths and modification of app data. This vulnerability is the successor to bad_query and requires an App Group configuration. The author emphasizes that it is for development and research purposes only and is unrelated to jailbreaking.
Although it has been submitted to Apple for review, it has not yet been patched. The community has responded swiftly, with tools like GestaltX emerging based on this vulnerability. Users are advised to be aware of the security risks.
Source: https://x.com/forcequitOS/status/2119475139528020218?