macOS 14.4

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

[Apple AppKit] An unprivileged app may be able to log keystrokes in other apps including those using secure input mode

[Apple Time Zone] An attacker may be able to read information belonging to another user

[Apple Find My] A malicious application may be able to access Find My data

[Apple Foundation] An app may be able to access user-sensitive data

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple PackageKit] An app may be able to access user-sensitive data

[Apple libxpc] An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges

[Apple ExtensionKit] An app may be able to access sensitive user data

[Apple PackageKit] An app may be able to overwrite arbitrary files

[Apple WebKit] Processing web content may lead to arbitrary code execution

[Apple Airport] An app may be able to read sensitive location information

[Apple SharedFileList] An app may be able to access sensitive user data

[Apple Share Sheet] An app may be able to access user-sensitive data

[Apple Screen Capture] An app may be able to capture a user's screen

[Apple AppleMobileFileIntegrity] Entitlements and privacy permissions granted to this app may be used by a malicious app

[Apple Intel Graphics Driver] An app may be able to execute arbitrary code with kernel privileges

[Apple Kernel] An app may be able to access user-sensitive data

[Apple Sandbox] An app may be able to edit NVRAM variables

[Apple Sandbox] An app may be able to leak sensitive user information

[Apple Spotlight] An app may be able to leak sensitive user information

[Apple Synapse] An app may be able to view Mail data

[Apple Dock] An app from a standard user account may be able to escalate privilege after admin user login

[Apple Shortcuts] Third-party shortcuts may use a legacy action from Automator to send events to apps without user cons…

[Apple UIKit] An app may be able to break out of its sandbox

[Apple ColorSync] Processing a file may lead to unexpected app termination or arbitrary code execution

[Apple ColorSync] Processing a file may lead to a denial-of-service or potentially disclose memory contents

[Apple ColorSync] Processing a file may lead to a denial-of-service or potentially disclose memory contents

[Apple CoreBluetooth - LE] An app may be able to access Bluetooth-connected microphones without user permission

[Apple Image Capture] An app may be able to access a user's Photos Library

[Apple WebKit] A malicious website may exfiltrate audio data cross-origin

[Apple Photos] Photos in the Hidden Photos Album may be viewed without authentication

[Apple ImageIO] Processing an image may result in disclosure of process memory

[Apple ImageIO] Processing an image may lead to arbitrary code execution

[Apple Safari] Processing web content may lead to a denial-of-service

[Apple TV App] An app may be able to access user-sensitive data

[Apple WebKit] Processing maliciously crafted web content may prevent Content Security Policy from being enforced

[Apple Metal] An application may be able to read restricted memory

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

[Apple Kerberos v5 PAM module] An app may be able to modify protected parts of the file system

[Apple PackageKit] An app may be able to bypass certain Privacy preferences

[Apple PackageKit] An app may be able to elevate privileges

[Apple AppleMobileFileIntegrity] An app may be able to modify protected parts of the file system

[Apple Image Processing] An app may be able to execute arbitrary code with kernel privileges

[Apple Storage Services] A user may gain access to protected parts of the file system

[Apple Safari Private Browsing] Private Browsing tabs may be accessed without authentication

[Apple PackageKit] An app may be able to elevate privileges

[Apple PackageKit] An app may be able to access protected user data

[Apple Admin Framework] An app may be able to elevate privileges

[Apple Bluetooth] An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard

[Apple libxpc] An app may be able to break out of its sandbox

[Apple MediaRemote] An app may be able to access user-sensitive data

[Apple WebKit] A maliciously crafted webpage may be able to fingerprint the user

[Apple System Settings] An app may be able to access sensitive user data

[Apple Notes] An app may be able to access user-sensitive data

[Apple WebKit] Processing maliciously crafted web content may prevent Content Security Policy from being enforced

[Apple Music] An app may be able to create symlinks to protected regions of the disk

[Apple ImageIO] Processing an image may lead to arbitrary code execution

[Apple Messages] An app may be able to access user-sensitive data

[Apple AppleMobileFileIntegrity] An app may be able to elevate privileges

[Apple Siri] A person with physical access to a device may be able to use Siri to access private calendar information

[Apple Sandbox] An app may be able to access user-sensitive data

[Apple Accessibility] A malicious app may be able to observe user data in log entries related to accessibility notifica…

[Apple Shortcuts] An app may be able to access information about a user's contacts

[Apple Siri] An attacker with physical access may be able to use Siri to access sensitive user data

[Apple QuartzCore] Processing malicious input may lead to code execution

[Apple Disk Images] An app may be able to break out of its sandbox

[Apple TCC] An app may be able to access user-sensitive data

[Apple Music] An app may be able to access user-sensitive data

[Apple libarchive] A maliciously crafted ZIP archive may bypass Gatekeeper checks

[Apple WebKit] Processing web content may lead to arbitrary code execution

[Apple NSSpellChecker] An app may be able to access user-sensitive data

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple WebKit] Processing web content may lead to a denial-of-service