macos_sandbox

macOS入門 - Appサンドボックス macOSへの移行に関するブログ投稿シリーズの続きとして、macOSのAppサンドボックスについて少しお話ししたいと思います。 まずmacOS App structureのブログ投稿を読むことを強くお勧めします。読者がAppとプロセス（タスク）の違いを理解し、launchdとApp起動の関係について少し知っていることを前提とします。 例で見るサンドボックス 初めてmacOSサンドボックスについて学んだとき、私は単純に悪意のあるWordマクロを作成しようとしました。...

GHSA-HQ2X-R82H-9WJ4 Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Impact Popups opened from a sandboxed iframe through a link for example target="blank" or a middle-click did not inherit the iframe's HTML sandbox restrictions. Content that was meant to run sandboxed could open a popup with the embedding app's full origin, gaining access to that origin's cookies...

CVE-2026-84569

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...

CVE-2026-43789

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-84569

CVE-2026-84569 is an access issue in macOS Golden Gate 27 involving the system pasteboards , resolved through additional sandbox restrictions . A malicious app could potentially access sensitive user data from other applications' pasteboard content. The NVD-assigned CVSS 3.1 score is 5.5 (MEDIUM)...

CVE-2026-84569

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...

CVE-2026-43789

CVE-2026-43789 is an access issue in Apple macOS addressed through additional sandbox restrictions . The vulnerability allows an app to access user-sensitive data , with the NVD assigning a CVSS 3.1 score of 7.5 (HIGH) based on a network attack vector requiring no privileges or user interaction. ...

CVE-2026-43789

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

PT-2026-91626

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description An access issue exists where an application may be able to access sensitive user data due to insufficient sandbox restrictions on the system pasteboards. A sandbox is a security mechanism for...

CVE-2026-17595 Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that read Java object properties not intended to be exposed to the expression engine, disclosing internal JVM class metadata...

CVE-2026-17595

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that read Java object properties not intended to be exposed to the expression engine, disclosing internal JVM class metadata...

CVE-2026-44112 OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes

OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and write...

CVE-2026-7938

Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-43409: Exposure of Private Personal Information to an Unauthorized Actor

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

EUVD-2011-3052

Malware in sbrugna...

CVE-2025-53927

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the shutil.copy2 method in Python to copy the command they...

CVE-2025-30458

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox...

MGASA-2024-0222 Updated nss & firefox packages fix security vulnerabilities

Use-after-free in networking. CVE-2024-5702 Use-after-free in JavaScript object transplant. CVE-2024-5688 External protocol handlers leaked by timing attack. CVE-2024-5690 Sandboxed iframes were able to bypass sandbox restrictions to open a new window. CVE-2024-5691 Cross-Origin Image leak via...

[SECURITY] [DSA 5604-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5604-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 23, 2024 https://www.debian.org/security/faq -...

CVE-2023-42887: Undefined Security Weakness

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read arbitrary files...