Mas0Nshi

**Nome do Software Vulnerável e Versões Afetadas** macOS Sequoia versões anteriores a 15.7.7 macOS Sonoma versões anteriores a 14.8.7 macOS Tahoe versões anteriores a 26.5 **Descrição** Existe uma condição de corrida (race condition) devido ao manuseio inadequado de links simbólicos, que são atalhos que apontam para outro arquivo ou diretório. Esta falha pode permitir que um aplicativo acesse Contatos sem o consentimento do usuário. **Recomendações** Atualize o macOS Sequoia para a versão 15.7.7. Atualize o macOS Sonoma para a versão 14.8.7. Atualize o macOS Tahoe para a versão 26.5.

**Name of the Vulnerable Software and Affected Versions** Happy DOM versions 19 and lower **Description** Happy DOM, a JavaScript implementation of a web browser without a graphical user interface, contains a security issue that could lead to Remote Code Execution (RCE) attacks. The Node.js VM Context within Happy DOM is not fully isolated. Running untrusted JavaScript code within this context may allow it to escape the VM and gain access to process-level functionality. The extent of control an attacker gains depends on whether the process uses ESM or CommonJS. With CommonJS, an attacker can potentially access the `require()` function to import modules. JavaScript evaluation is enabled by default in Happy DOM, which may pose a risk if untrusted code is executed within the environment. Approximately 2.7 million weekly downloads are impacted. **Recommendations** Upgrade to version 20.0.0 or later, which disables JavaScript evaluation by default.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.5 iPadOS versions prior to 18.5 **Description** A logic issue was identified and addressed through improved checks within the FrontBoard component. This issue allows an application to potentially enumerate a user's installed applications. Reports indicate that this issue has been exploited by some App Store applications to detect the presence of TrollStore on a device. **Recommendations** Update to iOS version 18.5 or later. Update to iPadOS version 18.5 or later.