Lucene search
K

1249 matches found

Positive Technologies
Positive Technologies
added 2023/10/25 12:0 a.m.4 views

PT-2023-8363 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 macOS Sonoma versions prior to 14.1...

7.8CVSS6.5AI score0.01281EPSS
Exploits0References23
Apple
Apple
added 2023/10/25 12:0 a.m.66 views

About the security content of iOS 16.7.2 and iPadOS 16.7.2

About the security content of iOS 16.7.2 and iPadOS 16.7.2 This document describes the security content of iOS 16.7.2 and iPadOS 16.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

8.8CVSS9AI score0.01736EPSS
Exploits0References1Affected Software2
Apple
Apple
added 2023/10/25 12:0 a.m.70 views

About the security content of macOS Monterey 12.7.1

About the security content of macOS Monterey 12.7.1 This document describes the security content of macOS Monterey 12.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

7.8CVSS8.4AI score0.01467EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/09/21 2:21 p.m.54 views

CVE-2023-40183

CVE-2023-40183 affects DataEase prior to 1.18.11. The vulnerability arises because the application uses only ImageIO.read() to verify image files without restricting allowed suffixes, enabling an attacker to embed executable/attack code in an image and rename it with an HTML extension to steal us...

7.5CVSS6.3AI score0.00636EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.5 views

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, and iPadOS relates to the execution of operations outside of the buffer during the processing of graphic files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.15263EPSS
Exploits2References10Affected Software3
Apple
Apple
added 2023/09/11 12:0 a.m.46 views

About the security content of macOS Monterey 12.6.9

About the security content of macOS Monterey 12.6.9 This document describes the security content of macOS Monterey 12.6.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

7.8CVSS8.7AI score0.15263EPSS
Exploits2References1Affected Software1
Apple
Apple
added 2023/09/11 12:0 a.m.47 views

About the security content of iOS 15.7.9 and iPadOS 15.7.9

About the security content of iOS 15.7.9 and iPadOS 15.7.9 This document describes the security content of iOS 15.7.9 and iPadOS 15.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

7.8CVSS8.7AI score0.15263EPSS
Exploits2References1Affected Software2
Apple
Apple
added 2023/09/11 12:0 a.m.60 views

About the security content of macOS Big Sur 11.7.10

About the security content of macOS Big Sur 11.7.10 This document describes the security content of macOS Big Sur 11.7.10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

7.8CVSS8.7AI score0.15263EPSS
Exploits2References1Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2023/09/11 12:0 a.m.49 views

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061...

7.8CVSS7.5AI score0.15263EPSS
In wildExploits2
Apple
Apple
added 2023/09/07 12:0 a.m.46 views

About the security content of iOS 16.6.1 and iPadOS 16.6.1

About the security content of iOS 16.6.1 and iPadOS 16.6.1 This document describes the security content of iOS 16.6.1 and iPadOS 16.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

7.8CVSS7.9AI score0.15263EPSS
Exploits2References1Affected Software2
Apple
Apple
added 2023/09/07 12:0 a.m.31 views

About the security content of macOS Ventura 13.5.2

About the security content of macOS Ventura 13.5.2 This document describes the security content of macOS Ventura 13.5.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

7.8CVSS7.9AI score0.15263EPSS
Exploits2References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/09/07 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-41064

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061...

7.8CVSS7.6AI score0.15263EPSS
Exploits2References1
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.6 views

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.2AI score0.03216EPSS
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.6 views

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.7AI score0.06322EPSS
Exploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.5 views

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.2AI score0.03091EPSS
Exploits0References12Affected Software4
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.23 views

Apple macOS EXR Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00247EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.33 views

Apple macOS ImageIO EXR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS7.2AI score0.00282EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/22 12:0 a.m.23 views

Apple macOS KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00223EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/22 12:0 a.m.4 views

PT-2023-4994

Name of the Vulnerable Software and Affected Versions Apple iOS, iPadOS, and macOS versions prior to 16.6.1 Apple macOS Monterey versions prior to 12.6.9 Apple macOS Ventura versions prior to 13.5.2 Apple iOS versions prior to 15.7.9 Apple iPadOS versions prior to 15.7.9 Apple macOS Big Sur...

7.8CVSS8.4AI score0.15263EPSS
Exploits2References171
BDU FSTEC
BDU FSTEC
added 2023/05/29 12:0 a.m.4 views

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

5.3CVSS8AI score0.00282EPSS
Exploits0References6Affected Software5
Rows per page
Query Builder