macOS 13.7.2

Microsoft Security Update Guide entry — NVD enrichira.

[Apple libarchive] Processing a malicious crafted file may lead to a denial-of-service

[Apple StorageKit] A malicious app may be able to gain root privileges

[Apple libxpc] An app may be able to gain elevated privileges

[Apple Screen Sharing Server] A user with screen sharing access may be able to view another user's screen

[Apple Software Update] A malicious app may be able to gain root privileges

[Apple Crash Reporter] An app may be able to access protected user data

[Apple Vim] Processing a maliciously crafted file may lead to heap corruption

[Apple DiskArbitration] An encrypted volume may be accessed by a different user without prompting for the password

[Apple Kernel] An app may be able to break out of its sandbox

[Apple PackageKit] An app may be able to access user-sensitive data

[Apple System Settings] An app may be able to determine a user’s current location

[Apple PackageKit] An app may be able to access user-sensitive data

[Apple Apple Software Restore] An app may be able to access user-sensitive data

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple Accounts] Photos in the Hidden Photos Album may be viewed without authentication

[Apple Disk Utility] Running a mount command may unexpectedly execute arbitrary code

[Apple Kernel] An attacker may be able to create a read-only memory mapping that can be written to

[Apple SharedFileList] An app may be able to break out of its sandbox

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple SceneKit] Processing a maliciously crafted file may lead to a denial of service

[Apple Kernel] An app may be able to leak sensitive kernel state

[Apple libxpc] An app may be able to break out of its sandbox

[Apple System Settings] An app may be able to overwrite arbitrary files

[Apple AppleMobileFileIntegrity] A malicious app may be able to access private information

[Apple AppleMobileFileIntegrity] An app may be able to access sensitive user data

[Apple SharedFileList] An app may be able to overwrite arbitrary files

[Apple Audio] An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges

[Apple QuickTime Player] An app may be able to read and write files outside of its sandbox

[Apple WindowServer] An app may be able to capture keyboard events from the lock screen

[Apple APFS] An app may be able to access user-sensitive data

[Apple Dock] An app may be able to access protected user data

[Apple SharedFileList] An attacker may gain access to protected parts of the file system