Lucene search
+L

1283 matches found

CNNVD
CNNVD
added 2022/03/14 12:00 a.m.14 views

Apple macOS Big Sur 访问控制错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An Access Control Error vulnerability exists in Apple macOS Big Sur prior to version 11.6.5, which stems from improper access restrictions in QuickTime Player on the system. An attacker can write a malicious plugin to exploit the...

5.5CVSS6.7AI score0.00254EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.5 views

Apple iOS和Apple iPadOS 资源管理错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A resource management error vulnerability exists in the Kernel of Apple iOS 15.4 and iPadOS prior to 15.4, where an...

9.3CVSS7.8AI score0.01332EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.11 views

Apple iOS和Apple iPadOS访问控制错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An Access Control Error vulnerability exists in the MediaRemote module of Apple iOS and iPadOS, where a malicious...

4.3CVSS5AI score0.00694EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.11 views

Apple macOS Big Sur 后置链接漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS Big Sur prior to 11.6.5 A security vulnerability exists due to a symbolic link issue in xar. The vulnerability allows a local user to escalate privileges on the system...

5.5CVSS6.6AI score0.17715EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/03/14 12:00 a.m.7 views

PT-2022-15598 · Apple · Apple Macos +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 Security Update versions prior to 2022-003 Catalina Description: The issue allows a plug-in to potentially inherit the application's permissions and access user data. This w...

5.5CVSS5.5AI score0.00254EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/03/14 12:00 a.m.6 views

PT-2022-15613 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: A logic issue was addressed with improved validation. A malicious application may be able to gain root privileges. Recommendations: For versions prior to 12.3, update to macOS Monterey 12.3 to resolve...

9.3CVSS6.6AI score0.01184EPSS
SaveExploits0References16
OSV
OSV
added 2022/03/03 3:15 a.m.12 views

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

6.6CVSS5.8AI score0.00252EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:00 a.m.11 views

The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS, related to writing beyond the buffer in memory, allows attackers to access confidential information or cause service failures.

The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.1CVSS6.9AI score0.00923EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:00 a.m.13 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, as well as in browsers like Safari, multimedia player iTunes, and iCloud service for Windows operating systems, allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple’s iPadOS, watchOS, iOS, tvOS, Safari browser, multimedia player iTunes, and iCloud service for Windows operating systems is related to writing beyond the buffer limit in memory. Exploiting this vulnerability could...

9.3CVSS7.5AI score0.01817EPSS
SaveExploits0References15Affected Software14
CNNVD
CNNVD
added 2022/01/26 12:00 a.m.11 views

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's US macOS for the Macintosh desktop operating system. Apple macOS Monterey 12.2 suffers from a buffer error vulnerability that stems from a boundary error in the AMD kernel in macOS. An attacker could exploit the vulnerability to run a...

10CVSS9AI score0.02EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/23 12:00 a.m.12 views

Apple macOS High Sierra 安全漏洞

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers. Apple macOS High Sierra is vulnerable to a security flaw that could be exploited by attackers to execute non-executable text files via SMB shares...

7.8CVSS5.7AI score0.00234EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.16 views

The vulnerability of the kernel of operating systems tvOS, iOS, iPadOS, and watchOS allows attackers to escalate their privileges.

The vulnerability of the kernels in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow attackers to gain increased privileges...

5.5CVSS5.9AI score0.00381EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.13 views

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain unauthorized access to protected information.

The vulnerability in the kernels of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to operations that occur outside of the buffers in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.02072EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/08 12:00 a.m.13 views

The vulnerability of iOS operating systems, related to deficiencies in authentication procedures, allows a perpetrator to activate the Apple Pay transaction card on a locked or drained phone.

The vulnerability of iOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enable the Apple Pay payment card on a locked or drained phone using a static 15-byte string...

5.3CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:00 a.m.18 views

The vulnerability of Adobe Audition’s audio editing software for Windows and macOS, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe Audition for Windows and macOS relates to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.01258EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2021/11/09 6:30 p.m.22 views

webkitgtk: Type confusion leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.6AI score0.01664EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/11/09 6:30 p.m.22 views

webkitgtk: Insufficient checks leading to arbitrary code execution

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution...

8.8CVSS7.5AI score0.01867EPSS
SaveExploits0References5
OSV
OSV
added 2021/10/28 7:15 p.m.4 views

DEBIAN-CVE-2021-30809

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.1AI score0.01511EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/28 7:15 p.m.9 views

UBUNTU-CVE-2021-30818

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7AI score0.01618EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/27 12:00 a.m.13 views

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which arises from the fact that an attacker with physical access to the device may be able to view private contact information...

2.4CVSS4.9AI score0.00297EPSS
SaveExploits0References4
Rows per page
Query Builder