Y1Nkoc

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 **Description** An issue existed in the handling of environment variables. The issue was addressed with improved validation. An app may be able to access sensitive user data. **Recommendations** Update to macOS version 15.6 or later. Update to macOS version 14.7.7 or later. Update to macOS version 13.7.7 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.6 **Description** A permissions issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions. **Recommendations** Update to macOS version 15.6.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 macOS versions prior to Sequoia 15.6 **Description** The issue was addressed by removing the vulnerable code. Running an `hdiutil` command may unexpectedly execute arbitrary code. **Recommendations** Update to macOS Sonoma 14.7.7 or later. Update to macOS Ventura 13.7.7 or later. Update to macOS Sequoia 15.6 or later.

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 tvOS versions prior to 18.3 **Description** The issue is related to incorrect clearing or release of resources, which may lead to an unexpected app termination when parsing a file. Exploitation of this issue may allow an attacker to cause a denial of service. **Recommendations** For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later. For macOS Ventura versions prior to 13.7.3, update to macOS Ventura 13.7.3 or later. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 or later. For tvOS versions prior to 18.3, update to tvOS 18.3 or later.

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5709 Description: The issue is related to a use-after-free vulnerability in the Remote Desktop Protocol (RDP) Client of Windows operating systems. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: For versions prior to 1.2.5709, update to version 1.2.5709 or later to resolve the issue. As a temporary workaround, consider restricting access to the Remote Desktop Client until a patch is applied.