Gergely Kalman

A race condition exists due to improper handling of symbolic links, which are shortcuts that point to another file or directory. This flaw may allow an application to modify protected areas of the file system.

A race condition, which occurs when the timing or sequence of events is unplanned, was addressed with improved state handling. This issue could allow an application to gain root privileges.

A path handling issue exists in the `revisiond` component that allows an application already installed on the system to gain root privileges through local privilege escalation. The issue was caused by insufficient validation during path processing.

An application may be able to break out of its sandbox, which is a security mechanism used to isolate running applications from the rest of the system.

An application may be able to gain root privileges due to improved handling of symlinks.

A race condition, which occurs when the timing or sequence of events is unplanned and leads to an unexpected result, was addressed with improved state handling. This flaw could allow an application to gain root privileges, leading to privilege escalation.

A path handling issue exists where insufficient validation could allow an application to gain root privileges.

A path handling issue exists due to insufficient validation. This could allow a malicious application to gain root privileges. It is reported that European organizations may be especially at risk.

An issue involving logic restrictions allowed an application to potentially access protected user data.

An application may be able to access user-sensitive data due to insufficient entitlement checks.

An application may be able to access protected user data due to insufficient validation of symlinks.

A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive user data due to insufficient path validation.

A permissions issue was addressed with additional restrictions. An application may be able to gain root privileges.

An issue existed in the handling of environment variables. This issue was addressed with improved validation. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. An app may be able to bypass certain Privacy preferences.

A permissions issue was addressed with additional restrictions. The issue involves a scenario where `sudo` attempts to load an unsigned dynamic library (`dylib`) from the current directory. This can be triggered by executing a command such as `/S*/L*/S*/u*/b*/c*.r* exec $PWD/ sudo ls`.

A permissions issue existed that allowed a malicious application to potentially gain root privileges. The issue was addressed by removing the vulnerable code.

This issue was addressed with improved validation of symlinks. An app may be able to access user-sensitive data.

An issue was addressed with improved validation of environment variables, which may allow an app to access user-sensitive data. The issue is fixed in macOS Sequoia 15.

The issue is related to insufficient access restrictions in the Music component of macOS, iPadOS, and iOS operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. An app may be able to modify protected parts of the file system.