Noah Roskin-Frazee

The issue is related to the handling of temporary files, which may allow an app to access user-sensitive data. This could potentially bypass security restrictions and lead to unauthorized access to protected information.

This issue was addressed with improved redaction of sensitive information. An app may be able to view a user's phone number in system logs.

The issue is related to a buffer overflow in the LLVM component of the macOS operating system, which can lead to arbitrary code execution when processing web content. This can be exploited by a remote attacker.

A privacy issue was addressed with improved handling of files, which may allow an app to access sensitive user data. The issue is related to insufficient input validation in the NSSpellChecker interface of Mac OS, tvOS, watchOS, iOS, and iPadOS operating systems, potentially allowing an attacker to gain unauthorized access to protected information.

The issue is related to the Mail Search component and involves the disclosure of information through registration files. An app may be able to access sensitive user data. The estimated number of potentially affected devices is not specified.

A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access sensitive user data.

The issue is related to insufficient protection of registration data in the AppleEvents component of macOS, which may allow an unauthorized access to protected information. An app may be able to access information about a user's contacts. This issue was addressed with improved redaction of sensitive information.

A privacy issue is related to insufficient protection of registration data in the Contacts component of iOS, macOS, and iPadOS operating systems. This issue may allow an attacker to disclose protected information. The problem is associated with inadequate private data redaction for log entries, potentially enabling an app to access sensitive user data.

A permissions issue was addressed with additional restrictions, which may allow an app to access sensitive user data. The issue is related to insufficient access control in the Mac OS operating system, potentially allowing a remote attacker to disclose protected information.

The issue exists due to insufficient input validation in a component of the macOS operating system, specifically the File Provider. This can be exploited to cause a denial-of-service to Endpoint Security clients. An app may be able to cause this denial-of-service.

A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. The vulnerability is related to insufficient access restrictions in the AppSandbox component of the macOS operating system, which could allow an attacker to execute arbitrary commands.

The issue is related to a lack of protection for service data in the FileProvider component of the macOS operating system. This may allow an attacker to disclose protected information. An app may be able to access user-sensitive data. The issue was addressed with improved data protection.

This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent.

A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences.

A privacy issue was addressed with improved private data redaction for log entries. An app may be able to read sensitive location information.

The issue is related to insufficient access control in the Voice Memos component of the macOS operating system. It may allow an attacker to gain unauthorized access to sensitive information. The estimated number of potentially affected devices is not specified.

A logic issue was addressed with improved checks, which may allow an app to cause a denial-of-service. The issue is related to errors in processing input data in the libxpc library of the affected operating systems.