Guluisacat

A race condition exists where an app may be able to access sensitive user data. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

An issue exists where a maliciously modified application may not be prevented from launching due to insufficient app bundle integrity checks.

A flaw in the macOS Archive Utility allows a malicious application to access arbitrary files due to insufficient permissions checking. The issue can be exploited if a user executes an attacker-controlled shell script and is tricked into performing a drag-and-drop action. This process allows an attacker to swap a signed application's executable on disk, bypassing code signing protections that typically guard applications downloaded from the App Store or directly from the web.

A permissions issue existed where an application could potentially access protected user data. This was addressed by implementing additional restrictions.

An application may be able to hijack entitlements granted to other privileged applications due to improved data protection.

A parsing issue in the handling of directory paths existed due to insufficient path validation. This could allow an application to access protected user data.

The issue is related to insecure storage of confidential information in the MacOs operating system's Security component. It may allow an attacker to gain unauthorized access to protected information. This issue was addressed with improved validation of symlinks. An app may be able to access protected user data.

A malicious application may be able to leak sensitive user information due to inadequate checks. The issue was addressed with improved checks.

A permissions issue was addressed with additional restrictions. This issue may allow an app to access protected user data. The issue is related to a sandboxed app bypassing TCC protections.

The issue allows a malicious application to access private information. It was addressed with improved checks.

The issue was addressed with improved validation of symlinks. An app may be able to access protected user data.

The issue allows an app to bypass Privacy preferences. This was addressed through improved state management.

The issue allows an app to potentially access user-sensitive data. This was addressed with improved checks.

A path handling issue was addressed with improved validation, which may allow an app to access protected user data.

A logic issue was addressed with improved checks, which may allow an app to access protected user data. The issue is related to insufficient protection of service data in the macOS operating system, potentially allowing an attacker to access protected information.

A path handling issue was addressed with improved validation, which may allow an app to break out of its sandbox.

The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with improved permissions logic.