Michael Roitzsch

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks Cortex XDR agent versions (affected versions not specified) **Description** A flaw exists in a protection mechanism within the Palo Alto Networks Cortex XDR agent on macOS. This allows a local administrator to disable the agent, potentially enabling malware to execute malicious activities undetected. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mac OS X versions prior to 10.7.3 **Description** The issue allows remote attackers to obtain sensitive information contained in new backups by spoofing a storage object. This is due to the Time Machine feature not verifying the unique identifier of its remote AFP volume or Time Capsule. **Recommendations** For Mac OS X versions prior to 10.7.3, update to version 10.7.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** xine-lib versions prior to 1.0 MPlayer versions prior to 1.0pre6 **Description** The issue is related to multiple heap-based buffer overflows in the code used to handle MMS over TCP streams or RealMedia RTSP streams. This allows remote malicious servers to execute arbitrary code. **Recommendations** For xine-lib versions prior to 1.0, update to version 1.0 or later. For MPlayer versions prior to 1.0pre6, update to a version later than 1.0pre6.