PT-2023-21619 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: The issue allows an app to potentially view sensitive information due to inadequate checks. The estimated number of...

PT-2023-21446 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: An out-of-bounds read was addressed with improved input validation. Processing an image may result in disclosure of process memory. Recommendations: For versions prior to 13.3, update to macOS Ventura...

PT-2023-19016 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS versions prior to 12.6.4 Description: A logic issue was addressed with improved checks, which may have allowed an app to modify protected parts of the file system. Recommendations: For macOS versions prior t...

PT-2023-21615 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 iOS versions prior to 15.7.6 iPadOS versions prior to 15.7.6 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.7 tvOS versions...

PT-2023-8341 · Apple · Macos Ventura +1

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 Description: A logic issue was addressed with improved checks. This issue allows an app to bypass Gatekeeper checks. The estimated number of potentially affected devices worldwide is not provided. There is...

PT-2023-21612 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: The issue was addressed with improved memory handling. Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory. Recommendations: Fo...

PT-2023-21436 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: A validation issue was addressed with improved input...

PT-2023-21438 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue concerns files downloaded from the internet that may not have the quarantine flag applied. This was addressed with improved...

PT-2023-21618 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A denial-of-service issue was addressed with improved input validation. A remote user may be able to cause a denial-of-service. Recommendations: For versions prior to 13.3, update to macOS Ventura 13....

PT-2023-8409 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 tvOS versions prior to 16.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The issue is related to an out-of-bounds read in memory, which may allow a remote...

The vulnerability of the web page rendering module in the Safari browser, developed by WebKitGTK, as well as in the iOS, iPadOS, and macOS Ventura operating systems, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in the Safari browser, which is part of the WebKitGTK framework, in operating systems such as iOS, iPadOS, and macOS Ventura, is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code throu...

PT-2023-1866 · Apple · Garageband

Name of the Vulnerable Software and Affected Versions: GarageBand for macOS versions prior to 10.4.8 Description: The issue is related to insufficient access controls in GarageBand for macOS, which may allow an attacker to gain elevated privileges. This can occur during the installation of...

CVE-2023-23493

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Ventura prior to 13.2, iOS prior to 16.3, and iPadOS prior to 16.3, which stems from a problem with memory handling and can be exploited by an attacker to execut...

SUSE CVE-2009-0165

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "gallocn."...

SUSE CVE-2009-2823

The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting XSS attacks via unspecified web client software...

SUSE CVE-2010-1394

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML document fragments...

SUSE CVE-2010-3623

Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

SUSE CVE-2010-3808

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of editing commands, which allows remote attackers to execute arbitrary code or cause a denial of service...

SUSE CVE-2010-3824

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving SVG use elements...