Ron Masas

An inappropriate implementation in the File Input component allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, by using a crafted HTML page.

A race condition exists due to improper handling of symbolic links, which may allow a shortcut to bypass sandbox restrictions. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

A privacy issue existed where a malicious application could potentially capture screenshots of sensitive information displayed in embedded views. This was addressed with improved checks.

A clickjacking issue was addressed with improved out-of-process view handling. This issue may allow an app to trick a user into granting access to photos from the user's photo library.

Processing maliciously crafted web content may lead to an unexpected process crash. The issue was addressed with improved checks.

Processing maliciously crafted web content may lead to universal cross site scripting. This issue was addressed through improved state management.

A correctness issue was addressed with improved checks, allowing an app to potentially read arbitrary files.

An access issue was addressed with additional sandbox restrictions. This issue may allow an app to read arbitrary files. The vulnerability is related to the lack of protection for service data in the NSOpenPanel component of the macOS operating system, which could allow an attacker to disclose protected information.

The issue is related to incorrect handling of symlinks, which may allow a remote attacker to disclose sensitive user data. A website may be able to access sensitive user data when resolving symlinks.

A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially observe unprotected user data.

A resource exhaustion issue was addressed with improved input validation. Processing web content may lead to a denial-of-service. The issue is related to how GPUs handle shaders and can cause devices to freeze or crash, forcing reboots.

The issue allows an app to bypass Privacy preferences. It was addressed with improved permissions logic. The problem is related to the Shortcuts app, which allowed programmatic access to TCC protected files from within the app sandbox.

A permissions issue was addressed with additional restrictions. This issue allows an app to potentially read sensitive location information.

The issue is related to insufficient protection of internal data in the Maps component of various Apple operating systems. This may allow an attacker to gain unauthorized access to protected information. An app may be able to read sensitive location information due to the issue. The problem was addressed with improved handling of caches.

The issue was addressed with improved memory handling. An app may be able to disclose kernel memory.

The issue allows for Code Injection when analyzing a project. An attacker can include commands in a build file, such as `build.gradle` or `gradle-wrapper.jar`, which will be executed with the privileges of the application. This can be triggered when running the CLI tool directly or when running a scan with one of the IDE plugins that invoke the Snyk CLI. Successful exploitation would likely require some level of social engineering to coerce an untrusted project to be downloaded and analyzed. If the IDE has a Trust feature, the target folder must be marked as ‘trusted’ to be vulnerable.

The issue allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. A successful exploit requires a user to execute the snyk test command on untrusted files. This could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline.

The issue concerns the processing of maliciously crafted DMG files, which may lead to arbitrary code execution with system privileges. This was addressed with improved validation of symlinks.

A logic issue was addressed with improved restrictions, which may have allowed an app to read sensitive location information.

The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is also a mention of a remote code execution (RCE) issue in the Jupyter Notebook component of Visual Studio Code. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.