Frode Moe

The issue allows attackers to obtain sensitive information by reading a history file because Safari does not delete Recently Closed Tabs data when a user clears their history.

The issue allows attackers to read group-ACL-restricted keychain items of arbitrary apps via a crafted app with a signature from a self-signed certificate or Developer ID certificate.

The issue allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL, due to the failure of Spotlight to enforce the Mail "Load remote content in messages" configuration.