Pedro Tôrres

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 **Description** The issue is related to insufficient access restrictions in the PackageKit component of macOS, which may allow a remote attacker to elevate their privileges. An app may be able to modify protected parts of the file system. **Recommendations** For macOS versions prior to 13.7.3, update to macOS Ventura 13.7.3 to resolve the issue. For macOS versions prior to 14.7.3, update to macOS Sonoma 14.7.3 to resolve the issue. For macOS versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 **Description** A malicious application may be able to modify protected parts of the file system due to inadequate checks. **Recommendations** For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 **Description** A malicious application may be able to modify protected parts of the file system due to insufficient checks. **Recommendations** For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 **Description** A malicious application may be able to modify protected parts of the file system due to inadequate checks. **Recommendations** For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1.

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 2 macOS Sequoia versions prior to 15 **Description** A malicious app with root privileges may be able to modify the contents of system files due to inadequate checks. The issue was addressed with improved checks. **Recommendations** For visionOS versions prior to 2, update to visionOS 2 to resolve the issue. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 **Description** A path handling issue was addressed with improved validation. This issue allows an app to potentially overwrite arbitrary files. **Recommendations** For macOS versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For macOS versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue. For macOS versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 macOS Monterey versions prior to 12.7.4 macOS Sonoma versions prior to 14.4 macOS Ventura versions prior to 13.6.5 **Description** A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access user-sensitive data. **Recommendations** For iOS versions prior to 16.7.6, update to iOS 16.7.6 to resolve the issue. For iPadOS versions prior to 16.7.6, update to iPadOS 16.7.6 to resolve the issue. For macOS Monterey versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue. For macOS Ventura versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 **Description** The issue allows an app to modify protected parts of the file system. It was addressed with improved checks. **Recommendations** For macOS versions prior to 12.7.4, update to macOS Monterey 12.7.4. For macOS versions prior to 13.6.5, update to macOS Ventura 13.6.5. For macOS versions prior to 14.4, update to macOS Sonoma 14.4.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 **Description** The issue allows an app to bypass certain Privacy preferences. This was addressed with improved checks. **Recommendations** For macOS versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For macOS versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue. For macOS versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.4 macOS Monterey versions prior to 12.7.4 macOS Ventura versions prior to 13.6.5 **Description** An injection issue was addressed with improved input validation. This issue may allow an app to elevate privileges. **Recommendations** For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue. For macOS Monterey versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For macOS Ventura versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 **Description** An injection issue was addressed with improved input validation, which may allow an app to elevate privileges. **Recommendations** For macOS versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For macOS versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue. For macOS versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue.