Bohdan_Stasiuk

تم إصلاح مشكلة الرجوع إلى إصدار أقدم من خلال فرض قيود إضافية على توقيع الكود. قد تسمح هذه المشكلة لأحد التطبيقات بالوصول إلى بيانات حساسة خاصة بالمستخدم. وترتبط المشكلة بالتخزين غير المحمي للمعلومات السرية، وهو ما يمكن أن يستغله مهاجم عن بُعد للحصول على وصول غير مصرح به إلى المعلومات المحمية.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved checks. An app may be able to access user-sensitive data. Recommendations: For macOS versions prior to 13.7.2, update to macOS Ventura 13.7.2 to resolve the issue. For macOS versions prior to 14.7.2, update to macOS Sonoma 14.7.2 to resolve the issue. For macOS versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.

A malicious application may be able to modify protected parts of the file system due to inadequate checks.

A malicious application may be able to modify protected parts of the file system due to insufficient checks.

A malicious application may be able to modify protected parts of the file system due to inadequate checks.

A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data.

A path handling issue was addressed with improved validation, allowing an app to potentially read arbitrary files.

A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access user-sensitive data.

An injection issue was addressed with improved input validation, which may allow an app to elevate privileges.

The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with improved permissions logic.