macOS CVE-2025-31191 Sandbox Escape Detection

Aaron Mog@AaronMogS2S

•updated May 5, 2025•2•29

Detects attempts to manipulate the 'com.apple.scopedbookmarksagent.xpc' keychain item using the security command as part of CVE-2025-31191 in macOS sandbox escape.