CVE-2020-3866

This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Catalina 10.15.3. Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper...

(0Day) AMD Radeon Divide By Zero Denial of Service Vulnerability

This vulnerability allows local attackers to trigger a Denial-of-Service condition on vulnerable installations of AMD Radeon drivers on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

Apple macOS IO80211Family Stack-based Buffer Overflow Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Apple macOS Mojave Out-of-Bounds Read Vulnerability (CNVD-2020-03002)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An out-of-bounds read vulnerability exists in Apple macOS Mojave versions prior to 10.14.4. An attacker can exploit the vulnerability to read restricted memory...

Apple iOS and Apple macOS Mojave IOKit SCSI Component Memory Corruption Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple macOS Mojave is a specialized operating system developed for Mac computers. A security vulnerability exists in the IOKit SCSI component in Apple iOS versions prior...

Apple macOS Mojave Intel Graphics Driver component arbitrary code execution vulnerability (CNVD-2020-03212)

Apple macOS Mojave is the operating system for Apple's line of Mac computers. An arbitrary code execution vulnerability exists in the Apple macOS Mojave Intel Graphics Driver component, which can be exploited by an attacker to execute arbitrary code with system privileges...

Apple macOS Mojave AMD Component Memory Corruption Vulnerability

Apple macOS Mojave is the operating system for Apple's line of Mac computers. A memory corruption vulnerability exists in the memory handling of the AMD component of Apple macOS Mojave, which can be exploited by an attacker to execute arbitrary code with system privileges...

Multiple Linux Distributions CVE-2019-14899 Security Bypass Vulnerability

Description Multiple Linux Distributions are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Apple iOS Apple macOS Archlinux Linux 2019.05...

Apple macOS AMDRadeonX4000_AMDSIGLContext Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Apple macOS 10.15.1 Denial Of Service

Exploit Title: Apple macOS 10.15.1 - Denial of Service PoC Date: 2019-11-02 Exploit Author: 08Tc3wBB Vendor Homepage: Apple Software Link: Version: Apple macOS msghlocalport, msg1.msghsize, msg4.msghreserved, unsigned intmsg4.msghid, QWORD &msg1.msghreserved, // inputmem1 msg2.msghsize 2, //...

Apple macOS 10.15.1 - Denial of Service (PoC)

Apple macOS 10.15.1 - Denial of Service PoC Exploit Title: Apple macOS 10.15.1 - Denial of Service PoC Date: 2019-11-02 Exploit Author: 08Tc3wBB Vendor Homepage: Apple Software Link: Version: Apple macOS msghlocalport, msg1.msghsize, msg4.msghreserved, unsigned intmsg4.msghid, QWORD...

Apple macOS AppleIntelCFLGraphicsFramebuffer.kext Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Apple macOS Multiple Security Vulnerabilities

Description Apple macOS is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Technologies Affected Apple macOS 10.12 Apple macOS 10.12.1 Apple macO...

Apple macOS Catalina WebKit Component Logic Flaw Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.WebKit is one of the components of the Web browser engine. A security vulnerability exists in the drawing of Web page elements in the WebKit component of Apple macOS Catalina prior to version 10.15. The...

Apple macOS, iCloud for Windows and iTunes for Windows UIFoundation Component Buffer Overflow Vulnerability

Apple iTunes for Windows and others are products of Apple Inc.Apple iTunes for Windows is a media player application based on the Windows platform.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc. Apple...

Apple macOS CFFromShiftJISLen Out-Of-Bounds Read Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the CFFromShiftJISLen...

Apple macOS securityd Heap-based Buffer Overflow Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the sandbox on affected installations of Apple Safari. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the securityd service...

Apple macOS Mojave Time Machine Component Input Validation Error Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Time Machine is one of the system, file backup components. A security vulnerability exists in the Time Machine component in Apple macOS Mojave versions prior to 10.14.6. An attacker could exploit the...

Unspecified vulnerability in Apple macOS Multiple component (CNVD-2019-28859)

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Grapher component of Apple macOS Mojave versions prior to 10.14.6. An attacker can exploit the vulnerability to execute arbitrary code with system privileges...

Apple macOS Multiple Arbitrary Code Execution Vulnerability (CNVD-2019-25207)

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. An arbitrary code execution vulnerability exists in the Disk Management component and Security component in Apple macOS Mojave versions prior to 10.14.6. An attacker can exploit this vulnerability to execut...