# macOS Security Bugs Exposed Safari History and Device Location to Unauthorized Apps

DevFeed: [macOS Security Bugs Exposed Safari History and Device Location to Unauthorized Apps](<https://devfeed.tech/articles/macos-security-bugs-exposed-safari-history-and-device-location-to-unauthorized-apps-39527.md>)

Original publisher: [Read original article](<https://rambo.codes/posts/2023-04-04-macos-security-bugs-exposed-safari-history-and-device-location-to-unauthorized-apps>)

Published: 2023-04-04T18:00:00Z

Content type: article

Language: en

Sources: [Rambo Codes](<https://devfeed.tech/sources/rambo-codes.md>)

Topics: [macOS](<https://devfeed.tech/topics/macos.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Reverse Engineering](<https://devfeed.tech/topics/reverse-engineering.md>)

Tags: [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [macos](<https://devfeed.tech/tags/macos.md>), [macos-security](<https://devfeed.tech/tags/macos-security.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [safari](<https://devfeed.tech/tags/safari.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This article examines Apple operating-system security vulnerabilities, including CVE-2023-23506/28192, involving improper validation of clients by XPC services. It explains how assumptions about local XPC service isolation can fail and discusses the potential exposure of sensitive data.

## Source excerpt

Gui Rambo writes about his coding and reverse engineering adventures.