Noah Roskin-Frazee

O problema está relacionado ao tratamento de arquivos temporários, o que pode permitir que um aplicativo acesse dados confidenciais do usuário. Isso poderia potencialmente contornar restrições de segurança e levar ao acesso não autorizado a informações protegidas.

Este problema foi resolvido com o aprimoramento da ocultação de informações confidenciais. Um aplicativo pode ser capaz de visualizar o número de telefone de um usuário nos logs do sistema.

O problema está relacionado a um estouro de buffer no componente LLVM do sistema operacional macOS, o que pode levar à execução de código arbitrário durante o processamento de conteúdo da web. Isso pode ser explorado por um invasor remoto.

Foi corrigido um problema de privacidade relacionado ao tratamento aprimorado de arquivos, que poderia permitir que um aplicativo acessasse dados confidenciais do usuário. O problema está relacionado à validação insuficiente de entradas na interface NSSpellChecker dos sistemas operacionais macOS, tvOS, watchOS, iOS e iPadOS, podendo permitir que um invasor obtenha acesso não autorizado a informações protegidas.

O problema está relacionado ao componente Mail Search e envolve a divulgação de informações por meio de arquivos de registro. Um aplicativo pode conseguir acessar dados confidenciais do usuário. O número estimado de dispositivos potencialmente afetados não foi especificado.

A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access sensitive user data.

The issue is related to insufficient protection of registration data in the AppleEvents component of macOS, which may allow an unauthorized access to protected information. An app may be able to access information about a user's contacts. This issue was addressed with improved redaction of sensitive information.

A privacy issue is related to insufficient protection of registration data in the Contacts component of iOS, macOS, and iPadOS operating systems. This issue may allow an attacker to disclose protected information. The problem is associated with inadequate private data redaction for log entries, potentially enabling an app to access sensitive user data.

A permissions issue was addressed with additional restrictions, which may allow an app to access sensitive user data. The issue is related to insufficient access control in the Mac OS operating system, potentially allowing a remote attacker to disclose protected information.

The issue exists due to insufficient input validation in a component of the macOS operating system, specifically the File Provider. This can be exploited to cause a denial-of-service to Endpoint Security clients. An app may be able to cause this denial-of-service.

A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. The vulnerability is related to insufficient access restrictions in the AppSandbox component of the macOS operating system, which could allow an attacker to execute arbitrary commands.

The issue is related to a lack of protection for service data in the FileProvider component of the macOS operating system. This may allow an attacker to disclose protected information. An app may be able to access user-sensitive data. The issue was addressed with improved data protection.

This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent.

A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences.

A privacy issue was addressed with improved private data redaction for log entries. An app may be able to read sensitive location information.

The issue is related to insufficient access control in the Voice Memos component of the macOS operating system. It may allow an attacker to gain unauthorized access to sensitive information. The estimated number of potentially affected devices is not specified.

A logic issue was addressed with improved checks, which may allow an app to cause a denial-of-service. The issue is related to errors in processing input data in the libxpc library of the affected operating systems.