113 matches found
CVE-2022-25366
Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...
CVE-2022-25366
Summary : CVE-2022-25366 affects Cryptomator up to v1.6.5 and earlier. The root cause is a DYLIB injection path: despite a Hardened Runtime flag, the app holds com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements, enabling an att...
CVE-2022-25366
Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...
CVE-2022-25366: Untrusted Search Path
Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...
Fortinet FortiClient Dylib injection (FG-IR-21-079) (macOS)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-079 advisory. - An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and...
FortiClient (MacOS) - Dylib injection Vulnerability observed in FortiClientMacOS
An improper control of generation of code vulnerability CWE-94 in FortiClient for MacOS may allow an authenticated attacker to hijack the MacOS camera via replacing the FortiClient camera handling library with a malicious one...
Mattermost Desktop App Code Injection Vulnerability
Mattermost Desktop App is a messaging desktop application from Mattermost USA. A code injection vulnerability exists in Mattermost Desktop App versions prior to 4.3.0 macOS, which can be exploited by an attacker to inject dylib files...
CVE-2019-20856
An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...
Design/Logic Flaw
An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...
CVE-2019-20856
CVE-2019-20856 affects Mattermost Desktop App on macOS prior to 4.3.0. The connected documents describe a vulnerability that enables dylib injection , but do not provide concrete details about the root cause beyond that description. The impact is described as the ability to inject dynamic librari...
CVE-2019-20856
An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...
PT-2020-10819
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.3.0 Description An issue was discovered that allows dylib injection. Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue...