Do Son Two critical flaws in the open-source BI tool DataEase allow attackers to achieve remote code execution and arbitrary file writes, exposing unpatched systems to compromise.
file write
A vulnerability (CVE-2024-27876) in Apple's libAppleArchive allows arbitrary file writes and can bypass Gatekeeper on macOS and iOS. Patches are available.