Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

This advisory lists multiple vulnerabilities across Apple products (numerous CVEs) that can lead to information disclosure, sandbox escapes, privilege misuse, denial-of-service, and in some cases arbitrary code execution in the context of the logged-on user; impacts vary by component and user privileges, and the report maps several issues to the ATT&CK Execution/Exploitation-for-Client-Execution technique.