Zero click vulnerability in Apple's macOS Mail | by Mikko Kenttälä | Apr, 2021
Zero-Click Zip TL;DR I found a zero click vulnerability in Apple Mail, which allowed me to add or modify any arbitrary file inside Mailâs sandbox environment. This could lead to many bad things including unauthorized disclosure of sensitive information to a third party. An attacker can modify victimâs Mail configuration including mail redirects which enables takeover of victimâs other accounts via password resets. This vulnerability can be used to change the victimâs configuration so that victims will be propagating the attack to their correspondents in a worm-like fashion...
Source: medium.com