About the security content of macOS Monterey 12.1

About the security content of macOS Monterey 12.1 This document describes the security content of macOS Monterey 12.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

OESA-2021-1461 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was discovered in the way samba implements SMB1 authentication. Even if Kerberos authentication is required, an attacker can use this flaw to retrieve the clear text password sent over the...

PT-2021-23266 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.19.1 Description: The issue allows attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings. This is achieved throug...

PUB-A-183610267

In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

Storefront upgrade error : 'Storefront cannot be upgraded because the following folders are in use by another program'

Storefront cannot be upgraded because the following folders are in use by another program. Close the program and try again: C:\inetpub\wwwroot\Citrix\apps\AppData C:\inetpub\wwwroot\Citrix\appsAuth...

PT-2021-17013 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bounds checking in the System Management Unit SMU, which may cause invalid memory accesses or updates. This could result in the SMU...

CVE-2021-41771

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

CVE-2021-30850

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system...

Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. Under specialized conditions, an invited group member may continue to have access to a project even after t...

MGASA-2021-0451 Updated perl-DBI packages fix security vulnerability

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. CVE-2014-10402...

PT-2021-18913

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.6 macOS Catalina versions prior to Security Update 2021-005 tvOS versions prior to 15 Description An access issue was addressed with improved access restrictions, which could allow a user to gain access to...

CVE-2021-30656

An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout...

Memory corruption

An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout...

CVE-2021-30656

An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout...

CVE-2021-30656

CVE-2021-30656 describes a local access issue in Apple devices where memory management weaknesses could allow a malicious app to determine the kernel memory layout. The vulnerability is tied to Apple's iOS/iPadOS kernel components and is mitigated by updates in iOS 14.5 and iPadOS 14.5. Multiple ...

CVE-2021-30673

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to access a user's call history...

CVE-2021-30783

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able to circumvent sandbox restrictions...

DEBIAN-CVE-2021-28701

Another race in XENMAPSPACEgranttable handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, are de-allocated when a guest switches back from v2...

CVE-2021-30783

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2021-30783

The CVE-2021-30783 issue is a macOS sandbox/access control bypass. The vulnerability affects macOS components and is addressed by upstream fixes in macOS Big Sur 11.5 and Security Updates 2021-004 Catalina and 2021-005 Mojave. The described impact is that a sandboxed process may circumvent sandbo...