Bohdan_Stasiuk

A downgrade issue was addressed with additional code-signing restrictions. This issue may allow an app to access sensitive user data. The problem is related to the unprotected storage of confidential information, which can be exploited by a remote attacker to gain unauthorized access to protected information.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved checks. An app may be able to access user-sensitive data. Recommendations: For macOS versions prior to 13.7.2, update to macOS Ventura 13.7.2 to resolve the issue. For macOS versions prior to 14.7.2, update to macOS Sonoma 14.7.2 to resolve the issue. For macOS versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.

A malicious application may be able to modify protected parts of the file system due to inadequate checks.

A malicious application may be able to modify protected parts of the file system due to insufficient checks.

A malicious application may be able to modify protected parts of the file system due to inadequate checks.

A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data.

A path handling issue was addressed with improved validation, allowing an app to potentially read arbitrary files.

A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access user-sensitive data.

An injection issue was addressed with improved input validation, which may allow an app to elevate privileges.

The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with improved permissions logic.