Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Marcel Bresink

Researcher fromMarcel Bresink Software-Systeme
#45298of 53,639
5.5Total CVSS
Vulnerabilities · 1
PT-2017-1360
5.5
2017-02-20
Apple · Apple Macos · CVE-2016-7628
**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12.2 **Description** The issue is related to the "Assets" component of the operating system, which has inadequate access control restrictions. This allows a local attacker to bypass intended permission restrictions and potentially elevate their privileges, enabling them to modify a downloaded mobile asset through unspecified vectors. **Recommendations** For macOS versions prior to 10.12.2, update to version 10.12.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Assets" component to minimize the risk of exploitation.