Theevilbit

A path handling issue exists due to insufficient validation, which could allow an application to modify protected areas of the file system.

A race condition exists due to improper handling of symbolic links, which are shortcuts that point to another file or directory. This flaw may allow an application to modify protected areas of the file system.

An application may be able to break out of its sandbox due to insufficient validation of symlinks (symbolic links, which are files that point to another file or directory).

A race condition, which occurs when the timing or sequence of events is unplanned, was addressed with improved state handling. This issue could allow an application to gain root privileges.

An access issue exists where an application may be able to break out of its sandbox. A sandbox is a security mechanism for separating running programs from one another and from the system.

An application may be able to break out of its sandbox, which is a security mechanism used to isolate running applications from the rest of the system.

A permissions issue exists where an application running with root privileges may be able to access private information.

An authorization issue involving state management may allow an application to gain root privileges, which are the highest level of administrative access on a system.

A path handling issue exists where insufficient validation could allow an application to gain root privileges.

A race condition, which occurs when the timing or sequence of events is unplanned and leads to an unexpected result, was addressed with improved state handling. This flaw could allow an application to gain root privileges, leading to privilege escalation.

An application may be able to access protected user data due to improved handling of symlinks.

A permissions issue existed that could allow an app to cause a denial-of-service. The issue was resolved by removing the vulnerable code.

An application may be capable of accessing user-sensitive data.

An application may be capable of accessing user data that should be protected. The issue involves improper handling of symlinks.

A logging issue allowed an application to potentially access sensitive user data. The issue was addressed with improved data redaction.

A permissions issue existed that allowed a malicious application to potentially gain root privileges due to insufficient restrictions.

A permissions issue allowed an app to access sensitive user data. This issue was addressed with additional restrictions.

An authorization issue exists due to errors in the authorization procedure and improper state management. Exploitation may allow a remote attacker to gain unauthorized access to sensitive user data. An application may be able to access sensitive user data.

An access issue was addressed with additional sandbox restrictions. An app may be able to access sensitive user data.

A permissions issue allowed an app to read sensitive location information. This issue was addressed with additional restrictions.