Apple FontParser Buffer Error Vulnerability

Apple FontParser is a font parsing program from Apple. A buffer error vulnerability exists in Apple FontParser. The vulnerability stems from the fact that processing a maliciously crafted font file could result in arbitrary code execution and affects the following products and versions: Mac Pro...

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOs. Processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected: Mac Pro 2013 and newer models...

Millions of Thunderbolt-Equipped Devices Open to 'ThunderSpy' Attack

A new attack enables bad actors to steal data from Windows or Linux devices equipped with Thunderbolt ports – if they can get their hands on the device for just five minutes. The attack, called “Thunderspy,” specifically targets Thunderbolt technology, which is a hardware interface developed by...

Apple Security Update: macOS Catalina 10.15 Supplemental Update

Apple recommends to install security update macOS Catalina 10.15 Supplemental Update on devices MacBook Early 2015 and later, MacBook Air Mid 2012 and later, MacBook Pro Mid 2012 and later, Mac mini Late 2012 and later, iMac Late 2012 and later, iMac Pro all models, and Mac Pro Late 2013 and late...

Apple Security Update: macOS Catalina 10.15 Supplemental Update

Apple recommends to install security update macOS Catalina 10.15 Supplemental Update on devices MacBook Early 2015 and later, MacBook Air Mid 2012 and later, MacBook Pro Mid 2012 and later, Mac mini Late 2012 and later, iMac Late 2012 and later, iMac Pro all models, and Mac Pro Late 2013 and late...

Apple macOS Multiple Security Vulnerabilities

Description Apple macOS is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, bypass security restrictions or obtain sensitive information. Technologies Affected Apple IMac Apple Mac Pro Apple MacBook Apple MacMini Apple Macbook Air Apple...

FaceTime - VCPDecompressionDecodeFrame Memory Corruption Exploit

Exploit for macOS platform in category dos / poc FaceTime - VCPDecompressionDecodeFrame Memory Corruption Exploit There is a heap corruption vulnerability in VCPDecompressionDecodeFrame which is called by FaceTime. This bug can be reached if a user accepts a call from a malicious peer. The issue...

About the security content of macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro (2018) - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro (2018)

About the security content of macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro 2018 This document describes the security content of macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro 2018. About Apple security updates For our customers' protection, Apple doesn't...

About the security content of Wi-Fi Update for Boot Camp 6.4.0

About the security content of Wi-Fi Update for Boot Camp 6.4.0 This document describes the security content of Wi-Fi Update for Boot Camp 6.4.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

Apple Safari and Internet Explorer 8 Go Down at Pwn2Own, iPhone Up Next

VANCOUVER–On the first day of the Pwn2Own contest here, contestants were able to take down both Safari on Mac OS X and Internet Explorer 8 on Windows 7. None of the researchers decided to try their hand against Google Chrome, however, so that browser was the only one still standing after day one...

Apple Safari Still Easiest to Hack

For the third year in a row, security researcher Charlie Miller successfully compromised a fully patched MacBook Pro machine with a Safari vulnerability and exploit. Despite Apple’s best efforts at making it difficult to exploit the Mac OS X, Miller’s exploits show that Safari is still easy...

Apple Airport Extreme fails to properly process 802.11 frames

Overview A vulnerability exists in the Apple AirPort Extreme wireless driver that may allow an attacker to crash a vulnerable system. Description The Apple AirPort Extreme adapter is an 802.11g compatible wireless adapter used in Apple OS X laptops and desktops. A flaw exists in the way AirPort...