Beist

Existe um problema de negação de serviço onde um aplicativo pode ser capaz de modificar partes protegidas do sistema de arquivos.

The issue is related to a local privilege escalation, where a malicious actor with read/write access to the host operating system can gain root access. This is due to insecure privilege management in the Raw Disk Handler component of the VMware Fusion hypervisor.

The issue is related to a format-string vulnerability in the Printing component of the operating system. This vulnerability can be exploited by a remote attacker using a specially crafted URL, such as `ipp:` or `ipps:`, to execute arbitrary code.

The issue is caused by a buffer overflow in the AMD subsystem of the operating system. This can be exploited by a remote attacker using a specially crafted application, potentially allowing them to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption.

The issue is caused by a buffer overflow in the Bluetooth component, allowing remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The issue is related to the Intel Graphics Driver component and is caused by pointer dereference errors. It can be exploited by local users to gain privileges or cause a denial of service.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the IOHIDFamily driver of the operating systems. Exploitation of the issue may allow a remote attacker to execute arbitrary code in a privileged context or cause a denial of service.

The issue is caused by a buffer overflow. It may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) using a specially crafted image.

The issue is related to a buffer overflow in the dyld component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption. This can be achieved via a crafted app.

The issue is related to a lack of protection for internal data in the XNU kernel component of the iOS operating system. This could allow a local attacker to access protected information stored in memory. The problem arises from the improper initialization of an unspecified data structure, which can be exploited by local users to obtain sensitive memory layout information.

The issue is related to errors in security settings of the dyld component in the iOS operating system. It allows a remote attacker to bypass a code-signing protection mechanism via a specially crafted app that places a signature in an executable file.

The issue is related to the kernel in Apple OS X, which does not properly validate pathnames in the environment. This allows local users to gain privileges via unspecified vectors. The vulnerability is also described as being related to insufficient access restrictions to certain functions, which can be exploited by a local attacker to elevate their privileges.

The issue is related to a component called UDF in the operating system, which has inadequate access control to files. This can be exploited by a local attacker using a malformed DMG image, potentially leading to privilege escalation or a denial of service, causing memory corruption and application crashes.

The issue is related to the dyld library in Mac OS X, which does not properly validate input. This allows a local attacker to gain privileges through unspecified vectors. The estimated number of potentially affected devices and details about real-world incidents are not provided.