Description (CNA)
This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / macOS | affected unspecified before 12.1 |
| Apple / macOS | affected unspecified before 11.6 |
| Apple / macOS | affected unspecified before 2021 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212979
- https://support.apple.com/en-us/HT212981
ADP enrichment
No English description supplied.