Information security
macOS Archive Utility Bug Lets Malicious Apps Bypass Security Checks
The Jamf team reported the macOS bug to Apple on May 31 and said Apple issued a patch on July 20 - but it's just now releasing technical details.The team said it discovered the flaw during research into general archiving feature security.The vulnerability, discovered by Jamf Threat Labs and tracked as CVE-2022-32910, affects the Archive Utility, an Apple tool that allows users to easily create and send archives.Source: Africa Studio via Alamy
New details about a known vulnerability in the macOS Archive Utility have emerged, showing that a cyberattacker armed with just the right specialty archive could exploit it to execute a malicious application while bypassing security checks - without the user ever being notified.