Ron Hass

A permissions issue was addressed with improved validation, allowing an application to potentially access restricted files. This issue relates to bypassing macOS System Integrity Protection (SIP).

The issue is related to a sandboxed process that may be able to circumvent sandbox restrictions. This is due to insufficient access control when handling XPC messages in the LaunchServices service of Mac OS. Exploitation of this issue may allow an attacker to bypass security restrictions and escalate their privileges. The issue was addressed with improved environment sanitization.

A logic issue was addressed with improved state management. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. The vulnerability was discovered while studying methods of launching and detecting malicious macros in Office documents on macOS. Researchers found that using Launch Services to run a command with a specific prefix allows escaping the app sandbox in macOS.

An access issue was addressed with improved access restrictions. A sandboxed process may be able to circumvent sandbox restrictions.