CVE-2024-23245

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent...

Apple iOS LaunchServices XPC Services API Security Restriction Bypass Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. In Apple iOS versions prior to 9.3, a security restriction bypass vulnerability exists in the XPC Services API in LaunchServices, which allows a remote attacker ...