Xnyhps

The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with improved permissions logic.

A logic issue was addressed with improved checks, which may allow an app to gain root privileges. The issue is related to insecure privilege management in the libxpc library of MacOS operating systems, potentially allowing an attacker to execute arbitrary code with root privileges.

A type confusion issue was addressed with improved checks. Processing a maliciously crafted package may lead to arbitrary code execution.

The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection.

An access issue was addressed with improvements to the sandbox, allowing an app to potentially access sensitive user information.

The issue is related to a Transport Layer Security (TLS) protocol implementation flaw in Windows operating systems, specifically concerning session fixation weaknesses. This can be exploited by a remote attacker to gain unauthorized access to protected information by connecting to a peer node. The vulnerability allows for spoofing when TLS accesses non-Extended Master Secret (EMS) sessions.

The issue allows remote authenticated users to potentially read system memory or have other unspecified impact by providing a crafted JID, due to the truncation of data without ensuring it remains valid UTF-8.

The issue allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read. This occurs due to a vulnerability in the `stringprep utf8 to ucs4` function.