Microsoft discovers bug in macOS that allows malware to circumvent Apple’s security

After Jonathan Bar Or, a Microsoft security researcher, discovered the Achilles CVE-2022-42821 macOS flaw, which allowed hackers to deploy malware to vulnerable macOS devices via untrusted apps and circumvent application execution restrictions imposed by Apple’s Gatekeeper security mechanism. Apple fixed the bug in macOS 13 (Ventura), macOS 12.6.2 (Monterey), and macOS 1.7.2 (Big Sur).

The Gatekeeper mechanism is intended to ensure that only trusted apps are allowed to run on Mac devices. However, a vulnerability known as Achilles by Microsoft enabled cybercriminals to circumvent this security measure.

Microsoft discovered the Achilles vulnerability, which uses a permission model known as Access Control Lists (ACLs) to add extremely restrictive permissions to a downloaded file (i.e., “everyone deny write,writeattr,writeextattr,writesecurity,chown”), preventing Safari from setting the quarantine extended attribute.

On Apple macOS, the Gatekeeper security mechanism is intended to identify trusted apps. An extended attribute called “” enforces this. It is assigned to internet-downloaded files.

According to Microsoft, the Achilles vulnerability takes advantage of a permission model known as Access Control Lists (ACLs) to grant extremely limited permissions to a downloaded file (i.e., “everyone deny write,writeattr,writeextattr,writesecurity,chown”). It prevents Safari from configuring the quarantine extended attribute.

The sources for this piece include an article in BleepingComputer.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web