Apple this week released security to address a total of four vulnerabilities affecting macOS. Specifically, the vulnerabilities affect versions Catalina, High Sierra, and Mojave.
Apple announced on Thursday that it has fixed the four vulnerabilities found affecting macOS Catalina, High Sierra, and Mojave
"This document describes the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave," Apple's advisory states.
CVE-2020-9973
One of the flaws the company is addressing is an out-of-bounds read, identified as CVE-2020-9973 , which affects the Model I/O component . Exploiting the flaw involves processing a malicious USD file , which could lead to arbitrary code execution or a DoS attack . This vulnerability was reported by Cisco Talos researcher Aleksandar Nikolic and affects all versions of macOS .
CVE-2020-9961
The second issue Apple is addressing is an arbitrary code execution vulnerability, identified as CVE-2020-9961, that affects the ImageIO. Exploiting the flaw involves using malicious image files. This vulnerability was reported by researcher Xingwei Lin from the Ant Group Light-Year Security Lab and affects macOS High Sierra and Mojave.
CVE-2020-9968
The third flaw, identified as CVE-2020-9968 , affects the sandbox and can be exploited by a malicious application to access restricted files. The issue was reported by TrustedSec 's Adam Chester and affects all versions of macOS.
CVE-2020-9941
The fourth issue patched in macOS, identified as CVE-2020-9941 , affects the Mail component in the High Sierra operating system . The vulnerability could be exploited by a remote attacker to “unexpectedly change the application state.” The flaw was reported by researchers from the FH Münster University of Applied Sciences in Germany .
