Bohdan Stasiuk

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved checks. An app may be able to access user-sensitive data. Recommendations: For macOS versions prior to 13.7.2, update to macOS Ventura 13.7.2 to resolve the issue. For macOS versions prior to 14.7.2, update to macOS Sonoma 14.7.2 to resolve the issue. For macOS versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.

A malicious application may be able to modify protected parts of the file system due to inadequate checks.

The issue allows an app to access sensitive user data due to inadequate redaction of sensitive information.

A malicious application may be able to modify protected parts of the file system due to insufficient checks.

A malicious application may be able to modify protected parts of the file system due to inadequate checks.

A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data.

A path handling issue was addressed with improved validation, allowing an app to potentially read arbitrary files.

An injection issue was addressed with improved input validation, which may allow an app to elevate privileges.

A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access user-sensitive data.

The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with improved permissions logic.