19506 matches found
CVE-2024-54495
CVE-2024-54495 concerns macOS where an app may modify protected parts of the file system due to insufficient permissions logic. The issue is addressed by Apple in macOS Sequoia 15.2 and macOS Sonoma 14.7.2 (and documented as fixed in these releases). Connected sources confirm the vulnerability ty...
CVE-2024-44243
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2. An app may be able to modify protected parts of the file system...
CVE-2024-44243
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system...
CVE-2024-44243
This CVE concerns macOS Sequoia 15.2 where a configuration issue allowed an app to modify protected parts of the file system. The fixed version is macOS Sequoia 15.2 (and related security advisories note fixes across Sequoia/Sonoma/Ventura). Affected component is a filesystem protection/permissio...
DRUPAL-CONTRIB-2024-076
Open Social is a Drupal distribution for online communities, which ships with a default optional module social\file\private to ensure the images and files provided by the distribution are stored in the private instead of the public filesystem. For installations of Open Social prior to version...
kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook
A flaw was found in the Linux kernel. A highly privileged user on a Network File System NFS client can bypass intended security restrictions and modify security labels on files located on an NFS filesystem. This issue occurs even when root squashing, a security feature designed to limit root user...
kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook
A flaw was found in the Linux kernel. A highly privileged user on a Network File System NFS client can bypass intended security restrictions and modify security labels on files located on an NFS filesystem. This issue occurs even when root squashing, a security feature designed to limit root user...
PT-2024-36361 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved permissions logic. An app may be able to modify protected parts of the file system. Recommendations: For macOS versions prior to...
Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076
Open Social is a Drupal distribution for online communities, which ships with a default optional module socialfileprivate to ensure the images and files provided by the distribution are stored in the private instead of the public filesystem. For installations of Open Social prior to version 11.8....
PT-2025-3056 · Apple · Macos Sonoma +3
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.2 macOS Sequoia versions prior to 15.2 macOS Ventura versions prior to 13.7.2 Description: A logic issue was addressed with improved restrictions, which could allow an attacker to gain access to protected...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
macOS 15.x < 15.2 Multiple Vulnerabilities (121839)
The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.2. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS...
CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2024-49088
CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...
CVE-2024-49093
CVE-2024-49093: Windows Resilient File System (ReFS) Elevation of Privilege vulnerability. Affected: ReFS on Windows. Root cause and exploit details are not fully disclosed in the provided documents; the CVSSv3.1 vector from the initial entry indicates LOCAL attack vector, LOW attack complexity, ...