Spark

The Mattermost Desktop App fails to specify an absolute path when searching for the `cmd.exe` file, allowing a local attacker who can place a `cmd.exe` file in the user's Downloads folder to cause remote code execution on that machine. A local attacker can exploit this issue by putting a malicious `cmd.exe` file in the Downloads folder, leading to remote code execution.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges.

This issue was addressed with improved entitlements.

The issue is related to insufficient access control in the SpringBoard component of the iOS operating system. This can be exploited by a remote attacker using a specially crafted application to spoof the dialog windows of arbitrary apps.