Code injection

2023-05-0820:15:00

PRIOn knowledge base

www.prio-n.com

garageband

macos

elevated privileges

installation

vulnerability

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

CPENameOperatorVersion
mac_os_xge10.0
mac_os_xlt10.4.8

CPE	Name	Operator	Version
	mac_os_x	ge	10.0
	mac_os_x	lt	10.4.8

References

support.apple.com/en-us/HT213650