macOS Mojave Security Updates for Mac

Full release notes are available here

APFS

• A local user may be able to read arbitrary files. The issue was addressed with improved permissions logic.

Audio

• An application may be able to read restricted memory. A memory corruption issue was addressed with improved validation.

CFNetwork

• Processing maliciously crafted web content may disclose sensitive user information. A memory initialisation issue was addressed with improved memory handling.

CoreAudio

• A malicious application may be able to read restricted memory. A memory corruption issue was addressed with improved validation.

CoreGraphics

• Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. A memory corruption issue was addressed with improved validation.

CoreText

• Processing a maliciously crafted font may result in the disclosure of process memory. A logic issue was addressed with improved state management.

• A remote attacker may be able to cause a denial of service. A buffer overflow was addressed with improved input validation.

Curl

• An attacker may provide a fraudulent OCSP response that would appear valid. This issue was addressed with improved checks.

DiskArbitration

• A malicious application may be able to modify protected parts of the file system. A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.

FontParser

• Processing a maliciously crafted font file may lead to arbitrary code execution. An out-of-bounds read was addressed with improved input validation.

FontParser

• Processing a maliciously crafted font file may lead to arbitrary code execution. A logic issue was addressed with improved state management.

Foundation

• A malicious application may be able to gain root privileges. A validation issue was addressed with improved logic.

ImageIO

• Processing a maliciously crafted image may lead to arbitrary code execution. This issue was addressed with improved checks.

Intel Graphics Driver

• An application may be able to execute arbitrary code with kernel privileges. An out-of-bounds write was addressed with improved input validation.

Intel Graphics Driver

• An application may be able to execute arbitrary code with kernel privileges. A race condition was addressed with additional validation.

Intel Graphics Driver

• A malicious application may be able to execute arbitrary code with kernel privileges. An out-of-bounds write issue was addressed with improved bounds checking.

Kernel

• A malicious application may be able to disclose kernel memory. A memory initialisation issue was addressed with improved memory handling.
• An application may be able to execute arbitrary code with kernel privileges. A logic issue was addressed with improved state management.
• A local attacker may be able to elevate their privileges. A memory corruption issue was addressed with improved validation.

Libxpc

• A malicious application may be able to gain root privileges. A race condition was addressed with additional validation.

Libxslt

• Processing a maliciously crafted file may lead to heap corruption. A double free issue was addressed with improved memory management.

NSRemoteView

• Processing maliciously crafted web content may lead to arbitrary code execution. A use after free issue was addressed with improved memory management.

Preferences

• A local user may be able to modify protected parts of the file system. A parsing issue in the handling of directory paths was addressed with improved path validation.

Smbx

• An attacker in a privileged network position may be able to leak sensitive user information. An integer overflow was addressed with improved input validation.

Tailspin

• A local attacker may be able to elevate their privileges. A logic issue was addressed with improved state management.

Tcpdump

• A remote attacker may be able to cause a denial of service. This issue was addressed with improved checks.

Time Machine

• A local attacker may be able to elevate their privileges. The issue was addressed with improved permissions logic.

Wi-Fi

• An application may be able to cause unexpected system termination or write kernel memory. A memory corruption issue was addressed with improved validation.

Wifivelocityd

• An application may be able to execute arbitrary code with system privileges. The issue was addressed with improved permissions logic.

WindowServer

• A malicious application may be able to unexpectedly leak a user's credentials from secure text fields. An API issue in Accessibility TCC permissions was addressed with improved state management.