Hackers Could Exploit Microsoft Teams on macOS to Steal Data

Cisco Talos reveals 8 vulnerabilities in Microsofts macOS apps, exploiting TCC framework weaknesses. Hackers can bypass security, inject…...

How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions

Cisco Talos has identified eight vulnerabilities in Microsoft applications for the macOS operating system. An adversary could exploit these vulnerabilities by injecting malicious libraries into Microsofts applications to gain their entitlements and user-granted permissions. Permissions regulate...

Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

GHSA-XGQM-WP7W-MGG2 Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287

Mattermost Desktop App versions ≤ 5.7.0 fail to disable certain Electron debug flags, enabling bypass of macOS TCC restrictions. Root cause: improper handling of Electron flags in the app. Overviews from multiple sources corroborate the issue (CVE-2024-36287). The documents do not provide specifi...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

PT-2024-26951 · Mattermost · Mattermost Desktop App

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop App versions =5.7.0 Description: The issue allows for bypassing TCC restrictions on macOS due to the failure to disable certain Electron debug flags. Recommendations: For Mattermost Desktop App versions =5.7.0, update to a...

Exploit for Incorrect Authorization in Apple Macos

CVE-2023-42860 Exploit for CVE-2023-42860https://nvd.nist.g...

About the security content of tvOS 17.3

About the security content of tvOS 17.3 This document describes the security content of tvOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of macOS Sonoma 14.3

About the security content of macOS Sonoma 14.3 This document describes the security content of macOS Sonoma 14.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

About the security content of watchOS 10.3

About the security content of watchOS 10.3 This document describes the security content of watchOS 10.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

About the security content of tvOS 17.2

About the security content of tvOS 17.2 This document describes the security content of tvOS 17.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 10.2

About the security content of watchOS 10.2 This document describes the security content of watchOS 10.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

CVE-2023-40299

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...

Code injection

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...

CVE-2023-40299

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...