CVE-2024-54529

CVE-2024-54529 is a type-confusion vulnerability in macOS CoreAudio, exposed via the com.apple.audio.audiohald Mach service in coreaudiod. Project Zero details show an attack chain where a HALS_Object is fetched from the heap and dereferenced through an unchecked type assumption, enabling control...

PT-2024-36382

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.2 macOS versions prior to Ventura 13.7.2 macOS versions prior to Sonoma 14.7.2 Description A logic issue was addressed with improved checks. This issue allows an application to potentially execute arbitrary...

CVE-2018-9402

In multiple functions of glproc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel...

CVE-2024-44307

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44307

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44306

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44306

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44307: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

When Guardians Become Predators: How Malware Corrupts the Protectors

When Guardians Become Predators: How Malware Corrupts the Protectors By Trellix · November 20, 2024 This blog was also written by Trishaan Kalra Introduction We often trust our security software to stand as an unbreakable wall against malware and attacks, but what happens when that very wall is...

CVE-2024-44306: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.6, which stems from a buffer overflow issue where an application may be able to execute arbitrary code with kernel privileges...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.6, which stems from a buffer overflow issue where an application may be able to execute arbitrary code with kernel privileges...

CVE-2024-44307

Summary: CVE-2024-44307 is a buffer overflow affecting macOS Sonoma prior to version 14.6. The issue could allow an app to execute arbitrary code with kernel privileges. Status in sources: fixed in macOS Sonoma 14.6 (per NVD/Red Hat/CNNVD/CVE records and Apple security content). Affected componen...

CVE-2024-44307

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44307

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44306

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44306

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44306

CVE-2024-44306 is a local buffer overflow in macOS Sonoma prior to 14.6 that could allow an app to execute arbitrary code with kernel privileges. Apple lists 14.6 as the fixed version. Affected product: macOS Sonoma; vulnerable component details are not further specified in the provided documents...

macOS 12.x < 12.7.6 Multiple Vulnerabilities (120910)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7.6. It is, therefore, affected by multiple vulnerabilities: - A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a...

ASB-A-346633576

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...