Y1Nkoc

An issue existed in the handling of environment variables. The issue was addressed with improved validation. An app may be able to access sensitive user data.

A permissions issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions.

The issue was addressed by removing the vulnerable code. Running an `hdiutil` command may unexpectedly execute arbitrary code.

The issue is related to incorrect clearing or release of resources, which may lead to an unexpected app termination when parsing a file. Exploitation of this issue may allow an attacker to cause a denial of service.

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5709 Description: The issue is related to a use-after-free vulnerability in the Remote Desktop Protocol (RDP) Client of Windows operating systems. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: For versions prior to 1.2.5709, update to version 1.2.5709 or later to resolve the issue. As a temporary workaround, consider restricting access to the Remote Desktop Client until a patch is applied.