CVE-2026-112706-CoreMedia-fd-leak
Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5–27.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
GITHUB · launched Oct 28, 2026 · 12 upvotes (top 87%) · 0 views
Niche: exploit proof of concept repositories · 134 launches, 7 in the last 7 days ▼ -22% · Explore this niche →
Category and tags
- Security
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 134 launches in exploit proof of concept repositories →
Could you build this?
No This is an iOS sandbox-escape vulnerability in CoreMedia with a PoC, which requires specialized security research, reverse engineering of private frameworks, and access to devices and exploit tooling.
What it would actually take: Reproducing it requires iOS reverse engineering (IDA/Ghidra, private framework analysis), XPC protocol analysis, and a jailbreak-capable or developer test environment. Responsible disclosure work also requires security research expertise.
Competitors
Other products that read as similar to this one : 217 launches clear the similarity bar, closest 8 shown.
Attention rank: #198 of 218 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 364 days after the earliest competitor.
- AVETemporalPoC-CVE-2026-112705 · github · 2026-10-30 · 49 upvotes · similarity 0.62
- CVE-2026-112611-cg-shading · github · 2026-10-27 · 15 upvotes · similarity 0.61
- ios.CVE-2026-84616-84607 · github · 2026-09-16 · 11 upvotes · similarity 0.61
- cve-2026-85706 · github · 2026-09-11 · 33 upvotes · similarity 0.57
- CVE-2026-34990 · github · 2026-09-27 · 29 upvotes · similarity 0.57
- CVE-2026-85884 · github · 2026-10-13 · 33 upvotes · similarity 0.56
- CVE-2026-41089-Netlogon-RCE-PoC · github · 2026-09-11 · 71 upvotes · similarity 0.56
- CVE-2026-111497-POC · github · 2026-10-21 · 13 upvotes · similarity 0.56
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.