Pinned Loading

1. airlift airlift Public

   AirLift — paired-Mac AirTraffic/ATAirlock sandbox escape for iOS 27.0

   Objective-C 425 76

2. cryptsn0w cryptsn0w Public

   Obsolete iOS jailbreak research using the now-patched TSS/Cryptex bug. Source shared for educational purposes. Not a new jailbreak release.

   Objective-C 195 24

3. CVE-2026-20687-AppleJPEGDriver-UAF CVE-2026-20687-AppleJPEGDriver-UAF Public

   CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

   Objective-C 28 9

4. CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions Public

   UAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.

   Objective-C 16 3

5. AppleKeyStore-close-UAF AppleKeyStore-close-UAF Public

   AppleKeyStoreUserClient close() UAF — PoC + diff analysis (bug found/patched by unknown third party in iOS 26.3 RC, not my discovery)

   Objective-C 29 9

6. CVE-2026-20637-AppleSEPKeyStore-UAF CVE-2026-20637-AppleSEPKeyStore-UAF Public

   CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

   Objective-C 58 7