CVE-2025-1398
macOS TCC Bypass via Code Injection
Résumé
macOS TCC Bypass via Code Injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com