Andreas Jaegersberger

A path handling issue exists in the `revisiond` component that allows an application already installed on the system to gain root privileges through local privilege escalation. The issue was caused by insufficient validation during path processing.

An app may bypass Gatekeeper checks due to a file quarantine bypass. Gatekeeper is a security feature that ensures only trusted software runs on the system.

A permissions issue exists where a malicious app may be able to gain root privileges, which are the highest level of administrative access on the system.

A parsing issue exists in the handling of directory paths due to insufficient path validation. This flaw could allow an application to gain root privileges, which are the highest level of administrative access on the system.

A parsing issue exists in the handling of directory paths due to insufficient path validation. This flaw could allow an application to gain root privileges, which are the highest level of administrative access on the system.

An authorization issue exists due to insufficient access control, which may allow an application to execute arbitrary code with system privileges.

A maliciously crafted ZIP archive may bypass Gatekeeper checks, allowing a file quarantine bypass. Gatekeeper is a security feature that ensures only trusted software runs on the system.

Insufficient validation of file attributes allows a malicious application to bypass Gatekeeper checks. Gatekeeper is a security feature that ensures only trusted software runs on the system.

A logic issue exists where an application may bypass Gatekeeper checks. Gatekeeper is a security feature that ensures only trusted software runs on the system.

A maliciously crafted ZIP archive may bypass Gatekeeper checks, which is the system's security feature used to ensure that only trusted software runs on the Mac.

A logic issue involving file handling allows a maliciously crafted ZIP archive to bypass Gatekeeper checks. Gatekeeper is a security feature that ensures only trusted software runs on the system.

A parsing issue in the handling of directory paths could allow an app to gain root privileges. This was addressed by improving path validation.

A race condition exists due to improper handling of symbolic links, which are shortcuts that point to another file or directory. This flaw may allow an application to access Contacts without obtaining user consent.

Processing a maliciously crafted file may lead to unexpected app termination.

A flaw exists due to improved URL validation. Specifically, on a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.

A flaw allowed an application to potentially access sensitive location data. The vulnerable code has been removed in updated versions.

A logic issue existed that allowed an application to potentially elevate privileges. Improved checks were implemented to resolve this issue.

A logic issue existed due to insufficient checks. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A denial-of-service issue was addressed with improved input validation. A non-privileged user may be able to modify restricted network settings.

A use-after-free issue existed due to vulnerable code. Removing the vulnerable code resolves the issue. This could allow an attacker to cause unexpected app termination.