Zoom’s auto update feature could exploit vulnerability in Mac OS

The alert has been issued for vulnerabilities in Apple’s operating systems including iPad OS and iOS, that can be exploited by remote attackers to execute arbitrary codes on targeted systems. Zoom, a video-calling app, in its security bulletin acknowledged that the vulnerabilities in Apple’s software and its auto update process could be exploited by attackers to escalate their privileges to root files in Mac OS, thereby compromising the security of the affected systems. In Apple’s kernel process, the vulnerability, according to information on its website, can allow an application to execute arbitrary code with kernel privileges. CERT-In, earlier this month, had also released alerts for high severity vulnerabilities in Mac OS, iPad OS, and iOS that could have been exploited by attackers to execute arbitrary code and bypass security restrictions on affected devices.