zeroxjf

Vulnerabilities

4 disclosed

CVEs

2 assigned

WIRED mention ↗

01 —

Vulnerability Research

Apple kernel / SEP

2026 AppleJPEGDriver startDecoder UAF kernel uaf CVE-2026-20687 ☆ 15 2026 IOHIDFamily FastPathUserClient UAF kernel uaf race ☆ 6 2026 AppleSEPKeyStore Use-After-Free kernel uaf CVE-2026-20637 ☆ 50 2026 SEP Firmware Panic via AppleKeyStore kernel/SEP DoS ☆ 23

02 —

Projects

Open-source tooling

Open-source iOS 18.4–18.6.2 userland exploit chain with JS injection into SpringBoard. Derived from DarkSword.

iOS 18.4–18.6 ›

03 —

Blog

Long-form notes

Feb 2026 Patching Metal Graphics into vphone

04 —

iOS Tweaks

iOS 16 / 17 · rootless

Tap to add my repo to your package manager

https://zeroxjf.github.io