Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary. Rated medium severity (CVSS 4.4). No vendor patch available.
Apple
Privilege Escalation
Itunes
NVD
CVSS 2.0
4.4
EPSS
0.1%