Apple macOS Out-of-Bounds Read Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. An out-of-bounds read vulnerability exists in the ATS component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...

Apple macOS Restricted Memory Read Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. A restricted memory read vulnerability exists in the Intel Graphics Driver component in Apple macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...

Apple macOS High Sierra AppleGraphicsControl Memory Read Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A memory read vulnerability exists in the AppleGraphicsControl component of Apple macOS High Sierra version 10.13.6, which can be exploite...

Mozilla: Proxy bypass using automount and autofs

Firefox proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. This issue only affects OS X in default...

CVE-2018-15668

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...

Cisco AMP for Endpoints macOS Connector Denial of Service Vulnerability

Cisco AMP for Endpoints Mac Connector Software for macOS is the United States Cisco Cisco company's set of macOS platform based on the integration of static and dynamic malware analysis and threat intelligence in one of the endpoint applications. The program can analyze the behavior and intent of...

The vulnerability of the Bluetooth component of the Mac OS X operating system allows a hacker to disclose sensitive information about the kernel’s memory allocation scheme.

The vulnerability of the Bluetooth component in the Mac OS X operating system is related to the incorrect implementation of security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information about the kernel’s memory allocation scheme through a specially...

The vulnerability of Grand Central Dispatch in the Mac OS X operating system allows a hacker to circumvent the limitations of a isolated environment.

The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...

The vulnerability of the Firmware component of the Mac OS X operating system, which allows a hacker to modify the EFI flash memory regions

The vulnerability of the Firmware component of the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to modify the EFI flash memory areas using a specially crafted privileged application...

The vulnerability of Firefox browser, related to incorrect display of characters in the address bar, allows a hacker to replace the URI address.

The vulnerability of Firefox browsers is related to the incorrect display of Tibetan characters when using certain fonts in OS X’s address bar. Exploiting this vulnerability allows a remote attacker to replace URI addresses...

UBUNTU-CVE-2018-4180

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions...

CVE-2017-7825

Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affect...

CVE-2017-7763

Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 5...

CVE-2018-4224

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security...

CVE-2018-4159

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4187

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message...

CVE-2018-4193

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Input validation vulnerability in multiple Apple products

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is a suite of operating systems for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system.Messag...

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2018-12244)

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; watchOS is a smart watch operating system; and UIKit is one o...

Apple macOS High Sierra memory corruption vulnerability (CNVD-2018-12245)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Windows Server is one of the Window Server components. A security vulnerability exists in the Windows Server component of Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...