🔒File Security Flaws Found in Major OSes Since 2005
Your OS's file system might be leaking secrets
TL;DR
Researchers found decades-old file security flaws in Android, Linux, macOS, and Windows. These flaws can reveal user activities and credentials through file notifications. Linux partially patched in December 2025, but others remain vulnerable.
Researchers discovered file security flaws in Android, Linux, macOS, and Windows, dating back to 2005. These flaws allow malicious users to infer activities like keystrokes and website visits through file notifications. This is a big deal for anyone using these OSes, as it can lead to credential theft and privacy breaches. The Linux vulnerability was partially fixed in December 2025 in kernels 5.10.248, 5.15.198, 6.1.160, 6.6.120, 6.12.64, and 6.18.3. However, Android, macOS, and Windows remain vulnerable, with Microsoft's response labeled as 'by-design'.
Key Points
Linux partially patched in December 2025 in kernels 5.10.248, 5.15.198, 6.1.160, 6.6.120, 6.12.64, and 6.18.3.
FileObserver on Android since 2008 goes past the FUSE layer, allowing permissionless apps to watch private folders.
Apple's macOS provided least info, with no bypasses found for reading private directories.
FSEvents on macOS still allowed monitoring of various file changes in .plist files.
Windows flaw reports full path of every file touched anywhere on the system, across all users, regardless of permissions.
Why It Matters
If you're using Linux, Android, macOS, or Windows, these flaws can be exploited to reveal user activities and credentials. Linux partially patched, but Android, macOS, and Windows remain vulnerable. This affects all users, especially those handling sensitive data.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,568 builders reading daily.