Ron Masas

يتيح تنفيذ غير سليم في مكون «إدخال الملفات» لمهاجم عن بُعد القيام بـ«انتحال واجهة المستخدم»، وهو عملية تقليد واجهة مستخدم شرعية لخداع المستخدمين، وذلك باستخدام صفحة HTML مُصممة خصيصًا لهذا الغرض.

توجد حالة تنافس بسبب المعالجة غير الصحيحة للروابط الرمزية، مما قد يسمح لاختصار ما بتجاوز قيود بيئة الحماية (sandbox). حالة التنافس هي حالة يعتمد فيها السلوك الجوهري للنظام على تسلسل أو توقيت أحداث أخرى لا يمكن التحكم فيها.

كانت هناك مشكلة تتعلق بالخصوصية، حيث كان من المحتمل أن يقوم تطبيق ضار بالتقاط لقطات شاشة للمعلومات الحساسة المعروضة في العروض المدمجة. وقد تم معالجة هذه المشكلة من خلال تحسين إجراءات الفحص.

تم إصلاح مشكلة ”الاختطاف بالنقر“ (clickjacking) من خلال تحسين إدارة العرض خارج العملية. قد تسمح هذه المشكلة لأحد التطبيقات بحث المستخدم على منح حق الوصول إلى الصور الموجودة في مكتبة الصور الخاصة به.

قد يؤدي معالجة محتوى ويب مصمم بشكل خبيث إلى تعطل غير متوقع للعملية. تم حل المشكلة من خلال تحسين إجراءات الفحص.

Processing maliciously crafted web content may lead to universal cross site scripting. This issue was addressed through improved state management.

A correctness issue was addressed with improved checks, allowing an app to potentially read arbitrary files.

An access issue was addressed with additional sandbox restrictions. This issue may allow an app to read arbitrary files. The vulnerability is related to the lack of protection for service data in the NSOpenPanel component of the macOS operating system, which could allow an attacker to disclose protected information.

The issue is related to incorrect handling of symlinks, which may allow a remote attacker to disclose sensitive user data. A website may be able to access sensitive user data when resolving symlinks.

A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially observe unprotected user data.

A resource exhaustion issue was addressed with improved input validation. Processing web content may lead to a denial-of-service. The issue is related to how GPUs handle shaders and can cause devices to freeze or crash, forcing reboots.

The issue allows an app to bypass Privacy preferences. It was addressed with improved permissions logic. The problem is related to the Shortcuts app, which allowed programmatic access to TCC protected files from within the app sandbox.

A permissions issue was addressed with additional restrictions. This issue allows an app to potentially read sensitive location information.

The issue is related to insufficient protection of internal data in the Maps component of various Apple operating systems. This may allow an attacker to gain unauthorized access to protected information. An app may be able to read sensitive location information due to the issue. The problem was addressed with improved handling of caches.

The issue was addressed with improved memory handling. An app may be able to disclose kernel memory.

The issue allows for Code Injection when analyzing a project. An attacker can include commands in a build file, such as `build.gradle` or `gradle-wrapper.jar`, which will be executed with the privileges of the application. This can be triggered when running the CLI tool directly or when running a scan with one of the IDE plugins that invoke the Snyk CLI. Successful exploitation would likely require some level of social engineering to coerce an untrusted project to be downloaded and analyzed. If the IDE has a Trust feature, the target folder must be marked as ‘trusted’ to be vulnerable.

The issue allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. A successful exploit requires a user to execute the snyk test command on untrusted files. This could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline.

The issue concerns the processing of maliciously crafted DMG files, which may lead to arbitrary code execution with system privileges. This was addressed with improved validation of symlinks.

A logic issue was addressed with improved restrictions, which may have allowed an app to read sensitive location information.

The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is also a mention of a remote code execution (RCE) issue in the Jupyter Notebook component of Visual Studio Code. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.