Phoenhex

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

A validation issue existed in the handling of symlinks, which has been addressed with improved validation. This could have allowed a local user to load unsigned kernel extensions, potentially leading to privilege escalation.

The issue is related to multiple memory corruption problems that were addressed with improved memory handling.

The issue is related to the DiskArbitration component and involves a race condition that allows attackers to execute arbitrary code in a privileged context. This can be achieved via a specially crafted app, exploiting synchronization errors when using a shared resource.