CVE-2021-26738

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges...

iTerm2 Security Vulnerability

iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.4.20 that stems from improper handling of certain escape sequences and allows remote code execution...

The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS allows attackers to disclose sensitive information that should be protected.

The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the Privacy Preferences component in macOS operating systems allows a violator to circumvent privacy settings.

The vulnerability of the Privacy Preferences component in macOS operating systems relates to the tracking of symbolic links. Exploiting this vulnerability could allow a hacker to circumvent privacy settings...

The vulnerability of the Pro Res component in operating systems such as iPadOS, iOS, macOS, and tvOS allows a hacker to execute arbitrary code.

The vulnerability of the Pro Res component in operating systems such as iPadOS, iOS, macOS, and tvOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TCC component in operating systems like watchOS and macOS allows a hacker to capture user screenshots.

The vulnerability of the TCC component in operating systems like watchOS and macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to capture user screens remotely...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura 13.6, which stems from the fact that applications that fail authentication checks may still be launched...

PT-2023-6034 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 iOS versions prior to 17 Description: The issue is related to a lack of protection for service data in the TCC component of the mentioned operating...

PT-2023-27773 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue allows an app to bypass Privacy preferences. It was addressed with improved permissions logic. The problem is related to the Shortcuts app, which allowed programmatic access to TCC protected...

PT-2023-27434 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.1 Description: The issue allows an attacker to access passkeys without authentication due to insufficient permissions checks. This has been addressed with additional permissions checks. Recommendations: For macOS...

PT-2023-8422 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is related to insufficient access controls in the Photos Storage of macOS, iOS, and iPadOS operating systems. This may allow an attacker to...

PT-2023-26525 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple tvOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS versions prior to Sonoma 14 Description: The issue is related to the handling of protocols, which...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which originates from an attacker who may be able to cause the system to unexpectedly terminate or read kernel memory...

PT-2023-27453 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or read kernel memory. Recommendations: For versions prior to 14, update to macOS Sono...

PT-2023-28638 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. Recommendations: For versions prior to 14, update to...

PT-2023-6033 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Sonoma versions prior to 14 Description: The issue allows an app to identify what other apps a us...

PT-2023-8477 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue exists due to insufficient input validation in a component of the macOS operating system, specifically in the Dev Tools. This could allow an app to gain elevated privileges. The issue was...