In today's video, we have great news to discuss coming from Ian Beer of Google Project Zero. Just a few hours ago Ian has released a few new exploits for iOS 11.4.1 and iOS 11.4 on the Google Project Zero page. The exploits are proof of concept and they are usable in a Jailbreak but we still need ROOT and the sandbox escape released by Ian targets the mobile user, unfortunately. So yes, more work is needed to turn these into a #jailbreak but we are on the right track.
#iOS 11.4.1 and iOS 11.4 are no longer signed so downgrades to these versions are unfortunately impossible at this point. If you have updated to iOS 12 it is not possible to go back anymore. If you are, indeed, running iOS 11.4.x then avoid updating to 12. All these exploits released by Ian are fixed in iOS 12, some of them present in Apple's bulletin, some of them not.
So, while we cannot directly use these exploits in a jailbreak for the moment, they are useful for jailbreaking and given root, we may be able to get even closer in the future, possibly a Houdini-like application. Ian has also released a write-up which details the vulnerabilities as well as one used in Pangu on iOS 7.1.2. The write-up is very well writ so I definitely recommend you to check it out.
▽ Resources ▽
▶ Ian's Kernel UaF
▶ Deja Xnu Sandbox escape
▶ Kernel Stack Mem Exploit
▶ NEW iOS 10 UNTETHERED JAILBREAK ACHIEVED & UNTETHER RELEASED (REQUIRES 7.0.4 BLOBS)
▶ iOS 12 (FINAL) UNTETHERED JAILBREAK SUCCESSFULLY ACHIEVED