Yann Gascuel

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 **Description** A permissions issue was addressed with improved validation. This issue allows a local attacker to elevate their privileges. The problem is related to insufficient access restrictions in the StorageKit component of macOS operating systems. **Recommendations** For macOS Ventura versions prior to 13.7.3, update to version 13.7.3 or later. For macOS Sequoia versions prior to 15.3, update to version 15.3 or later. For macOS Sonoma versions prior to 14.7.3, update to version 14.7.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.6 **Description** The issue allows a person with physical access to an unlocked Mac to potentially gain root code execution. This is achieved through a specific exploit that does not require user interaction beyond physical access. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not specified. **Recommendations** For macOS Sonoma versions prior to 14.6, update to macOS Sonoma 14.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.5 **Description** An authorization issue was addressed with improved state management, which may allow an attacker to elevate privileges. **Recommendations** For macOS Sonoma versions prior to 14.5, update to version 14.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.2 macOS versions prior to 13.6.3 macOS versions prior to 14.2 **Description** A process may gain admin privileges without proper authentication. The issue was addressed with improved checks. Unprivileged users, including those with guest access, may escalate permissions and gain full root control over the system. This is achieved through exploitation of the "diskutil" command line utility, which allows local users to mount filesystems with particular settings. **Recommendations** For macOS versions prior to 12.7.2, update to macOS Monterey 12.7.2 or later. For macOS versions prior to 13.6.3, update to macOS Ventura 13.6.3 or later. For macOS versions prior to 14.2, update to macOS Sonoma 14.2 or later. As a temporary workaround, consider restricting access to the `diskutil` command line utility until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PyInstaller versions prior to 3.6 **Description** A local privilege escalation issue is present in Windows software frozen by PyInstaller in "onefile" mode, when launched by a privileged user with a "TempPath" resolving to a world writable directory, such as C:WindowsTemp. This can occur when the software is launched as a service or scheduled task using a system account. The software must be restarted after the attacker launches the exploit program for exploitation to be possible. **Recommendations** For PyInstaller versions prior to 3.6, upgrade to PyInstaller version 3.6 and rebuild the software to resolve the issue. As a temporary workaround, consider avoiding the use of "onefile" mode for Windows software frozen by PyInstaller until a patch is applied. Restrict access to world writable directories, such as C:WindowsTemp, to minimize the risk of exploitation.