Zhipeng Huo

The issue was addressed with improved checks. An app with root privileges may be able to access private information.

An authorization issue was addressed with improved state management, allowing an app to potentially bypass certain Privacy preferences.

The issue is related to an authorization problem that has been addressed with improved state management. This may allow an app to access protected user data. The estimated number of potentially affected devices is not specified.

A permissions issue was addressed with additional restrictions. This issue may allow an app to delete files for which it does not have permission. The vulnerability is related to errors in processing permissions in the libxpc library of the operating systems.

The issue is related to a path handling problem that has been addressed with improved validation. This allows an app to potentially gain root privileges, enabling a malicious actor to elevate their privileges.

The issue is related to insufficient access control in the operating systems, which may allow an attacker to bypass existing security restrictions. An app may be able to bypass Privacy preferences. The estimated number of potentially affected devices worldwide is not specified.

An access issue was addressed with improvements to the sandbox, allowing an app to potentially access sensitive user information.

A logic issue was addressed with improved checks, allowing an app to potentially bypass Privacy preferences.

The issue allows an app to potentially overwrite arbitrary files due to inadequate file handling. This could lead to unauthorized modifications of system or user files.

The issue allows an app to bypass Privacy preferences. It was addressed with improved checks.

The issue allows a malicious application to read other applications' settings. This was addressed with additional permissions checks.

An issue existed within the path validation logic for symlinks, which was addressed with improved path sanitization. This could allow an application to access a user's files.

A logic issue was addressed with improved validation. A malicious application may be able to gain root privileges.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: An issue was found that could potentially expose a user's password on screen due to inadequate password obscuring in screenshots. This issue has been addressed with improved logic. Recommendations: For iOS versions prior to 14.5, update to iOS 14.5 or later to resolve the issue. For iPadOS versions prior to 14.5, update to iPadOS 14.5 or later to resolve the issue.

A path handling issue was addressed with improved validation. This issue may cause unexpected JavaScript execution from a file on disk when processing a maliciously crafted URL. The vulnerability is related to insufficient input validation in the Help Viewer component of macOS Big Sur, which may allow an attacker to execute arbitrary JavaScript code.

A logic issue was addressed with improved state management, which may allow a sandboxed process to circumvent sandbox restrictions.

A validation issue existed in the handling of symlinks, which has been addressed with improved validation of symlinks. This issue may allow an application to access restricted files.

A local attacker may be able to elevate their privileges due to this issue. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

A malicious application may be able to bypass certain Privacy preferences due to this issue. The issue was addressed with improved checks.

An issue exists in the Windows Print Spooler related to insecure privilege management. This flaw allows remote attackers to execute arbitrary code, escalate privileges, and impact the system.