Pwn2Car

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 26.3 **Description** A package validation issue existed that allowed an application to potentially gain root privileges. This issue was resolved by blocking the vulnerable package. **Recommendations** Update to macOS version 26.3.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 140 Firefox ESR versions prior to 128.12 Description: The issue is related to the executable file warning not alerting users before opening files with the `terminal` extension. This problem specifically affects Firefox for macOS, with other versions of Firefox being unaffected. Recommendations: For Firefox versions prior to 140, update to version 140 or later to resolve the issue. For Firefox ESR versions prior to 128.12, update to version 128.12 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 137.0.7151.55 **Description** The issue is an out of bounds write in V8, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is considered High. **Recommendations** For versions prior to 137.0.7151.55, update to version 137.0.7151.55 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 **Description** The issue is related to incorrect clearing or release of resources in the CoreMedia component of macOS, iOS, iPadOS, watchOS, tvOS, and visionOS operating systems. Parsing a file may lead to an unexpected app termination. Exploitation of this issue may allow a remote attacker to cause a denial of service. **Recommendations** For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later. For macOS Ventura versions prior to 13.7.3, update to macOS Ventura 13.7.3 or later. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 or later. For watchOS versions prior to 11.3, update to watchOS 11.3 or later. For tvOS versions prior to 18.3, update to tvOS 18.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.7 macOS versions prior to 15 **Description** The issue was addressed with improved memory handling. Processing a maliciously crafted video file may lead to unexpected app termination. **Recommendations** For macOS versions prior to 14.7, update to macOS Sonoma 14.7 to resolve the issue. For macOS versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15 **Description** A permissions issue was addressed with additional restrictions. This issue allows an app to access protected user data. **Recommendations** For versions prior to macOS Sequoia 15, update to macOS Sequoia 15 to resolve the issue. As a temporary workaround, consider restricting access to sensitive user data until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 128 Mozilla Firefox ESR versions prior to 115.13 Mozilla Thunderbird versions prior to 115.13 Mozilla Thunderbird versions prior to 128 **Description** The issue is related to an out-of-bounds access in Angle for GLSL shaders due to large allocation checks being too lenient. This could occur when allocating more than 8192 ints in private shader memory on Mac OS, potentially allowing a remote attacker to impact system performance. **Recommendations** For Mozilla Firefox versions prior to 128, update to version 128 or later. For Mozilla Firefox ESR versions prior to 115.13, update to version 115.13 or later. For Mozilla Thunderbird versions prior to 115.13, update to version 115.13 or later. For Mozilla Thunderbird versions prior to 128, update to version 128 or later.

**Name of the Vulnerable Software and Affected Versions** Samsung Magician version 8.0.0 **Description** An issue was discovered that allows an attacker to escalate privileges through arbitrary code execution by tampering with the directory and executable files used during the installation process. The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation. **Recommendations** For Samsung Magician version 8.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Magician version 8.0.0 **Description** An issue in Samsung Magician allows an attacker to escalate privileges via arbitrary file permission writes. This can occur because symlinks are used during the installation process. The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation. **Recommendations** For Samsung Magician version 8.0.0, consider restricting the use of symlinks during the installation process as a temporary workaround until a patch is available. Additionally, ensure that administrator passwords are handled securely to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.4 iPadOS versions prior to 17.4 tvOS versions prior to 17.4 watchOS versions prior to 10.4 visionOS versions prior to 1.1 macOS Sonoma versions prior to 14.4 **Description** The issue was addressed with improved memory handling. Processing web content may lead to arbitrary code execution. **Recommendations** For iOS versions prior to 17.4, update to iOS 17.4 or later. For iPadOS versions prior to 17.4, update to iPadOS 17.4 or later. For tvOS versions prior to 17.4, update to tvOS 17.4 or later. For watchOS versions prior to 10.4, update to watchOS 10.4 or later. For visionOS versions prior to 1.1, update to visionOS 1.1 or later. For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.4 visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 tvOS versions prior to 17.4 **Description** The issue is related to a component of WebKit in the mentioned operating systems, which is associated with a buffer overflow in memory. This can lead to arbitrary code execution when processing web content. A remote attacker may exploit this issue to execute arbitrary code. **Recommendations** For macOS Sonoma versions prior to 14.4, update to version 14.4 or later. For visionOS versions prior to 1.1, update to version 1.1 or later. For iOS versions prior to 17.4, update to version 17.4 or later. For iPadOS versions prior to 17.4, update to version 17.4 or later. For watchOS versions prior to 10.4, update to version 10.4 or later. For tvOS versions prior to 17.4, update to version 17.4 or later.

**Name of the Vulnerable Software and Affected Versions** Dell Display and Peripheral Manager for macOS versions prior to 1.3 **Description** The issue is related to an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitrary code, leading to privilege escalation. **Recommendations** For versions prior to 1.3, update to version 1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the installation folder to prevent modification of files by low privilege users.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 119.0.6045.105 **Description** The issue is related to a use after free in the Printing component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via specific UI gestures. This could be achieved by convincing a user to engage in specific UI gestures or by using a specially crafted web page. The severity of this issue is classified as Medium. **Recommendations** For Google Chrome versions prior to 119.0.6045.105, update to version 119.0.6045.105 or later to resolve the issue. As a temporary workaround, consider restricting access to the Printing component until a patch is applied. Avoid using specific UI gestures that could trigger the exploitation of heap corruption.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 119 Firefox ESR versions prior to 115.4 Thunderbird versions prior to 115.4.1 **Description** The issue is related to the implementation of the WebGL API for 3D graphics in browsers and a mail client, which is associated with uncontrolled resource consumption. This could allow a remote attacker to cause a denial of service. The problem arises when drivers are not robust to extremely large draw calls, potentially leading to a crash. **Recommendations** For Firefox versions prior to 119, update to version 119 or later to resolve the issue. For Firefox ESR versions prior to 115.4, update to version 115.4 or later to resolve the issue. For Thunderbird versions prior to 115.4.1, update to version 115.4.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 17.2 macOS Sonoma versions prior to 14.2 watchOS versions prior to 10.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 tvOS versions prior to 17.2 **Description** The issue is caused by a buffer overflow in the WebKit modules for displaying web pages, which may allow a remote attacker to execute arbitrary code. Processing web content may lead to arbitrary code execution due to improved memory handling. **Recommendations** For Safari versions prior to 17.2, update to Safari 17.2 or later. For macOS Sonoma versions prior to 14.2, update to macOS Sonoma 14.2 or later. For watchOS versions prior to 10.2, update to watchOS 10.2 or later. For iOS versions prior to 17.2, update to iOS 17.2 or later. For iPadOS versions prior to 17.2, update to iPadOS 17.2 or later. For tvOS versions prior to 17.2, update to tvOS 17.2 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 118.0.5993.70 **Description** The issue is related to a heap buffer overflow in the PDF component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted PDF file. This can happen if the attacker convinces a user to engage in specific user interactions. The exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted PDF file. **Recommendations** For Google Chrome versions prior to 118.0.5993.70, update to version 118.0.5993.70 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied. Restrict access to PDF files in Google Chrome to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 117.0.5938.132 **Description** The issue is related to a use after free vulnerability in the Passwords component of Google Chrome, which can lead to heap corruption. A remote attacker who convinces a user to engage in specific UI interaction can potentially exploit this issue. The attacker must craft specific UI interactions to exploit the vulnerability. **Recommendations** For Google Chrome versions prior to 117.0.5938.132, update to version 117.0.5938.132 or later to resolve the issue. As a temporary workaround, consider avoiding specific UI interactions that may trigger the vulnerability until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 120.0.6099.62 **Description** The issue is related to a use after free vulnerability in the Media Capture component of Google Chrome, which could potentially allow a remote attacker to exploit heap corruption through specific user interface interactions. This could lead to the disclosure of protected information. The severity of this issue is classified as medium by Chromium. **Recommendations** For Google Chrome versions prior to 120.0.6099.62, update to version 120.0.6099.62 or later to resolve the issue. As a temporary workaround, consider restricting user interface interactions that could potentially trigger the vulnerability until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Parallels Desktop (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction is required to exploit this issue, where the target in a guest system must visit a malicious page or open a malicious file. The specific flaw exists within the virtio-gpu virtual device due to the lack of proper validation of user-supplied data, resulting in a write past the end of an allocated buffer. An attacker can leverage this issue to execute code in the context of the hypervisor. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.