Yiğit Can Yilmaz

An app may bypass Gatekeeper checks due to a file quarantine bypass. Gatekeeper is a security feature that ensures only trusted software runs on the system.

A maliciously crafted disk image may bypass Gatekeeper checks, allowing a file quarantine bypass.

A logic issue exists where replying to an email could cause remote images to be displayed in Mail while in Lockdown Mode, which is a security setting that strictly limits certain functionalities to reduce the attack surface.

A flaw exists due to improper memory handling. Processing a specially crafted file could result in a denial-of-service or potential disclosure of memory contents.

An application with root privileges may be able to access private information due to missing entitlement checks.

A permissions issue was addressed with additional restrictions. An app may be able to access removable volumes without user consent.

A logic issue was addressed with improved state management. The issue may cause Privacy Indicators for microphone or camera access to be attributed incorrectly.

The issue allows an app to access removable volumes without user consent. This was addressed with improved entitlements.

A permissions issue was addressed with additional restrictions, which may have allowed an app to access a user's Photos Library.

A permissions issue was addressed with additional restrictions. A malicious app may be able to change network settings.

A permissions issue was addressed with additional restrictions. This issue allows a non-privileged user to modify restricted network settings.

A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially capture a user's screen.

A logic issue was addressed with improved checks, which could allow an attacker to access connected network volumes mounted in the home directory.

An access issue was addressed with improvements to the sandbox. This issue allows an app to potentially execute arbitrary code out of its sandbox or with certain elevated privileges.

The issue allows an app to access sensitive user data due to inadequate state management. This has been addressed with improved state management.

The issue is related to errors in security settings of the macOS operating system's isolated software environment, Sandbox. It may allow an attacker to gain unauthorized access to removable information media. An app may be able to access removable volumes without user consent due to a logic issue, which has been addressed with improved checks.

The issue is related to inadequate access control in the Printing component of the macOS operating system. It may allow an app to modify Printer settings. The issue was addressed with improved handling of caches.

A permissions issue was addressed with additional restrictions, which may have allowed an app to access sensitive user data.

A permissions issue was addressed with additional restrictions. This issue allows an app to bypass certain Privacy preferences.

An access issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions.