281 matches found
PT-2024-41495
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A permissions issue allowed a malicious application with root privileges to access private information. This was addressed with additional restrictions. Recommendations Update to macOS version 15.1 or...
“HM Surf” macOS Flaw Lets Attackers Access Camera and Mic – Patch Now!
Researchers at Microsoft discovered a new macOS vulnerability, "HM Surf" CVE-2024-44133, which bypasses TCC protections, allowing unauthorized access…...
Unauthorized data access vulnerability in macOS is detailed by Microsoft
The Microsoft Threat Intelligence team disclosed details about a macOS vulnerability, dubbed "HM Surf," that could allow an attacker to gain access to the user’s data in Safari. The data the attacker could access without users’ consent includes browsed pages, along with the device’s camera,...
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...
CVE-2024-45599 TCC Bypass in Cursor's macOS Application
Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...
CVE-2024-45599
CVE-2024-45599 affects Cursor prior to 0.41.0 on macOS. If a user has granted Cursor access to the camera or microphone, an attacker could leverage a DyLib Injection via the DYLD_INSERT_LIBRARIES environment variable to allow any running program on the machine to access those peripherals, bypassi...
CVE-2024-45599 TCC Bypass in Cursor's macOS Application
Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...
PT-2024-30973 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18 iPadOS versions prior to 18 macOS Sequoia versions prior to 15 Description: This issue was addressed with improved validation of symlinks, allowing unauthorized apps to access sensitive user data, including Health...
New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access
Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system's permissions-based model, which revolves around the Transparency, Consent, and Control TCC...
Hackers Could Exploit Microsoft Teams on macOS to Steal Data
Cisco Talos reveals 8 vulnerabilities in Microsofts macOS apps, exploiting TCC framework weaknesses. Hackers can bypass security, inject…...
How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions
Cisco Talos has identified eight vulnerabilities in Microsoft applications for the macOS operating system. An adversary could exploit these vulnerabilities by injecting malicious libraries into Microsofts applications to gain their entitlements and user-granted permissions. Permissions regulate...
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...
GHSA-XGQM-WP7W-MGG2 Mattermost Desktop App allows for bypassing TCC restrictions on macOS
Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...
CVE-2024-36287
Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...
CVE-2024-36287 Bypass of TCC restrictions on macOS
Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...
CVE-2024-36287 Bypass of TCC restrictions on macOS
Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...
CVE-2024-36287
Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...
CVE-2024-36287
Mattermost Desktop App versions ≤ 5.7.0 fail to disable certain Electron debug flags, enabling bypass of macOS TCC restrictions. Root cause: improper handling of Electron flags in the app. Overviews from multiple sources corroborate the issue (CVE-2024-36287). The documents do not provide specifi...
