CVE-2022-48481

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible...

Command injection

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible...

CVE-2022-48481

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible...

CVE-2022-48481

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible...

CVE-2022-48481

JetBrains Toolbox App (macOS) prior to version 1.28 is affected by a vulnerability allowing DYLIB injection. Root cause: dylib loading/injection path on macOS leads to potential tampering. Impact: supports potential malicious activity, with confidentiality/integrity/availability concerns noted in...

PT-2023-15814 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 1.28 Description: The issue concerns a DYLIB injection on macOS. This allows for potential malicious activity. The estimated number of potentially affected devices worldwide is not specified. There is n...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

Command injection

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

CVE-2022-46828

JetBrains IntelliJ IDEA is affected up to version 2022.3 on macOS due to a DYLIB injection vulnerability. The issue affects the loader path of dynamic libraries and can lead to local exploitation with high impact (per NVD: CVSSv3.1 base score 7.8, local access, high confidentiality/integrity/avai...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

Trend Micro Antivirus for Mac Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-25366

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...

Command injection

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...

CVE-2022-25366

Summary : CVE-2022-25366 affects Cryptomator up to v1.6.5 and earlier. The root cause is a DYLIB injection path: despite a Hardened Runtime flag, the app holds com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements, enabling an att...

CVE-2022-25366

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...

CVE-2022-25366

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...

Fortinet FortiClient Dylib injection (FG-IR-21-079) (macOS)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-079 advisory. - An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and...

CVE-2021-42754

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...