Google’s Project Zero has exposed a “high severity” flaw in macOS’ kernel XNU – which apparently has issues in its implementation of copy-on-write behavior – after Apple failed to fix it in 90 days.
Google’s Project Zero team is well-known for its knack of finding security flaws in the company’s own products as well as those manufactured by other firms. Its members locate flaws in software, privately report them to the manufacturers, and give them 90 days to resolve the problem before publicly disclosing it.
Last year, the team revealed vulnerabilities in Windows 10 S and Microsoft Edge.
