Gergely Kalman

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.3 iPadOS versions prior to 26.3 macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.3 tvOS versions prior to 26.3 visionOS versions prior to 26.3 watchOS versions prior to 26.3 **Description** A race condition, which occurs when the timing or sequence of events is unplanned and leads to an unexpected result, was addressed with improved state handling. This flaw could allow an application to gain root privileges, leading to privilege escalation. **Recommendations** Update iOS to version 26.3 Update iPadOS to version 26.3 Update macOS Sequoia to version 15.7.4 Update macOS Sonoma to version 14.8.4 Update macOS Tahoe to version 26.3 Update tvOS to version 26.3 Update visionOS to version 26.3 Update watchOS to version 26.3

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.3 iPadOS versions prior to 26.3 macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.3 visionOS versions prior to 26.3 **Description** A path handling issue exists where insufficient validation could allow an application to gain root privileges. **Recommendations** Update iOS to version 26.3 Update iPadOS to version 26.3 Update macOS Sequoia to version 15.7.4 Update macOS Sonoma to version 14.8.4 Update macOS Tahoe to version 26.3 Update visionOS to version 26.3

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15.7.4 macOS versions prior to Tahoe 26.3 macOS versions prior to Sonoma 14.8.4 **Description** A path handling issue exists due to insufficient validation. This could allow a malicious application to gain root privileges. It is reported that European organizations may be especially at risk. **Recommendations** Update to macOS Sequoia 15.7.4. Update to macOS Tahoe 26.3. Update to macOS Sonoma 14.8.4.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 26.3 **Description** An application may be able to gain root privileges due to improved handling of symlinks. **Recommendations** Update to macOS version 26.3.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8.3 macOS versions prior to Sequoia 15.7.3 **Description** An issue involving logic restrictions allowed an application to potentially access protected user data. **Recommendations** Update to macOS Sonoma version 14.8.3 or later. Update to macOS Sequoia version 15.7.3 or later.

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 26.1 macOS Sonoma versions prior to 14.8.2 macOS Sequoia versions prior to 15.7.2 watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 **Description** An application may be able to access protected user data due to insufficient validation of symlinks. **Recommendations** Update visionOS to version 26.1. Update macOS Sonoma to version 14.8.2. Update macOS Sequoia to version 15.7.2. Update watchOS to version 26.1. Update iOS to version 26.1. Update iPadOS to version 26.1. Update tvOS to version 26.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 **Description** A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive user data due to insufficient path validation. **Recommendations** Update to macOS Sonoma version 14.8.2 or later. Update to macOS Sequoia version 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 **Description** An application may be able to access user-sensitive data due to insufficient entitlement checks. **Recommendations** Update to macOS Sonoma version 14.8.2 or later. Update to macOS Sequoia version 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26 **Description** An issue existed in the handling of environment variables. This issue was addressed with improved validation. An app may be able to access sensitive user data. **Recommendations** Update to macOS Tahoe 26 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26 **Description** A permissions issue was addressed with additional restrictions. An application may be able to gain root privileges. **Recommendations** Update to macOS Tahoe 26.

**Name of the Vulnerable Software and Affected Versions** cryptexctl (affected versions not specified) **Description** A permissions issue was addressed with additional restrictions. The issue involves a scenario where `sudo` attempts to load an unsigned dynamic library (`dylib`) from the current directory. This can be triggered by executing a command such as `/S*/L*/S*/u*/b*/c*.r* exec $PWD/ sudo ls`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 **Description** A permissions issue existed that allowed a malicious application to potentially gain root privileges. The issue was addressed by removing the vulnerable code. **Recommendations** Update to macOS version 15.6 or later. Update to macOS version 14.7.7 or later. Update to macOS version 13.7.7 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 macOS Sequoia versions prior to 15.6 **Description** A permissions issue was addressed with additional restrictions. An app may be able to bypass certain Privacy preferences. **Recommendations** Update macOS to version 14.7.7 or later. Update macOS to version 13.7.7 or later. Update macOS to version 15.6 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Sequoia versions prior to 15.1 **Description** This issue was addressed with improved validation of symlinks. An app may be able to access user-sensitive data. **Recommendations** For versions prior to 15.1, update to macOS Sequoia 15.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15 **Description** An issue was addressed with improved validation of environment variables, which may allow an app to access user-sensitive data. The issue is fixed in macOS Sequoia 15. **Recommendations** For versions prior to macOS Sequoia 15, update to macOS Sequoia 15 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14 iOS versions prior to 17 iPadOS versions prior to 17 **Description** The issue is related to insufficient access restrictions in the Music component of macOS, iPadOS, and iOS operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. An app may be able to modify protected parts of the file system. **Recommendations** For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.5 **Description** A logic issue was addressed with improved restrictions, allowing a sandboxed process to potentially circumvent sandbox restrictions. This issue is related to errors in security settings of the AppSandbox component in macOS, which may enable an attacker to bypass the protective mechanism of the isolated program environment. **Recommendations** For versions prior to 13.5, update to macOS Ventura 13.5 to resolve the issue. As a temporary workaround, consider restricting access to sandboxed processes until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS Big Sur versions 11.7.9 and earlier macOS Monterey versions 12.6.8 and earlier macOS Ventura versions 13.5 and earlier **Description** This issue is related to the Privacy preferences component of macOS and is associated with the tracking of symbolic links. The exploitation of this issue may allow an attacker to bypass privacy settings. The issue was addressed with improved validation of symlinks. An app may be able to bypass Privacy preferences. **Recommendations** For macOS Big Sur versions prior to 11.7.9, update to version 11.7.9 to resolve the issue. For macOS Monterey versions prior to 12.6.8, update to version 12.6.8 to resolve the issue. For macOS Ventura versions prior to 13.5, update to version 13.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.5 iPadOS versions prior to 16.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 watchOS (affected versions not specified) **Description** An application may be able to bypass Privacy preferences due to insufficient protection of registration data. The issue involves SQLite logging restrictions. Exploitation may allow an attacker to bypass existing security limitations and potentially overwrite the TCC database, granting unauthorized access. **Recommendations** Update iOS to version 16.5 or later. Update iPadOS to version 16.5 or later. Update tvOS to version 16.5 or later. Update macOS Ventura to version 13.4 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.4 tvOS versions prior to 16.5 iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 **Description** The issue is related to insufficient input validation for the `MallocStackLogging` variable in the MallocStackLogging component of Mac OS, tvOS, iOS, iPadOS, and watchOS. Exploitation of this issue may allow an attacker to gain root privileges. An app may be able to gain root privileges due to this issue. **Recommendations** For macOS versions prior to 13.4, update to macOS Ventura 13.4 or later. For tvOS versions prior to 16.5, update to tvOS 16.5 or later. For iOS versions prior to 16.5, update to iOS 16.5 or later. For iPadOS versions prior to 16.5, update to iPadOS 16.5 or later. For watchOS versions prior to 9.5, update to watchOS 9.5 or later.