Jz

قد يتمكن أحد التطبيقات من الهروب من حاوية الأمان المخصصة له، والمعروفة باسم «صندوق الرمل» (sandbox). تم حل المشكلة من خلال تحسين حقوق الوصول.

تم إصلاح مشكلة في التحقق من صحة المدخلات عن طريق إزالة الكود المعرض للثغرة.

The issue was addressed with improved bounds checks. Processing a maliciously crafted image may lead to heap corruption.

The issue is caused by a buffer overflow in the ImageIO component, which may allow a remote attacker to disclose protected information. Processing an image may result in the disclosure of process memory. The issue was addressed with improved memory handling.

The issue is related to a local privilege escalation, where a malicious actor with read/write access to the host operating system can gain root access. This is due to insecure privilege management in the Raw Disk Handler component of the VMware Fusion hypervisor.