PT-2023-8484 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: An authentication issue was addressed with improved state management, allowing photos in the Hidden Photos Album to be viewed without authentication. The issue is related to a lack of authentication for...

PT-2023-27503 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent. Recommendations: For versions prior to 14,...

PT-2023-5652

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.6 macOS Monterey versions prior to 12.7 macOS Sonoma versions prior to 14 tvOS versions prior to 17 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 watchO...

CVE-2023-25953

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LIN...

PT-2023-23770 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.7 macOS versions prior to 12.6.6 macOS versions prior to 13.4 Description: A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system...

Canon IJ Network Tool 加密问题漏洞

Canon IJ Network Tool is a network tool from Canon Japan. A vulnerability exists in Canon IJ Network Tool version 4.7.5 and earlier for OS X 10.9.5-macOS 13 operating systems, IJ Network Tool version 4.7.3 and earlier for OS X 10.7.5-OS X 10.8 operating systems due to a cryptographic issue. An...

CVE-2023-23542

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data...

JVN#01937209: LINE WORKS Drive Explorer vulnerable to code injection

LINE WORKS Drive Explorer provided by WORKS MOBILE Japan Corp. contains a code injection vulnerability CWE-94. Impact An attacker who can login to the client where the affected product is installed may inject arbitrary code while processing the product execution. Since a full disk access privileg...

CVE-2023-28143

Qualys Cloud Agent for macOS versions 2.5.1-75 before 3.7 installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX macOS 10.15 and older versions. Attackers may exploit incorrect file permissions to give them ROOT command execution...

PT-2023-19012 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 tvOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The...

PT-2023-19005 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.3 macOS versions prior to 12.6.3 macOS versions prior to 13.2 Description: A buffer overflow issue was addressed with improved memory handling. Mounting a maliciously crafted Samba network share may lead to...

CVE-2022-32862

This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, macOS Monterey 12.6.1. An app with root privileges may be able to access private information...

PT-2022-21543 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved restrictions. This issue allows a shortcut to potentially view the hidden photos album without authentication. Recommendations: For versions prior to 13, update...

PT-2022-7233 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to improper access control in the macOS operating system's Sandbox component. An app with root privileges may be able to access private information due to this issue. The estimated...

PT-2022-21553 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved checks, allowing a sandboxed process to potentially circumvent sandbox restrictions. Recommendations: For versions prior to 13, update to macOS Ventura 13 to...

CVE-2022-32805

The issue was addressed with improved handling of caches. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to access sensitive user information...

PT-2022-6381 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7 and 16 Apple iPadOS versions prior to 15.7 Apple macOS versions prior to Big Sur 11.7 and Monterey 12.6 Description: The issue is related to a buffer overflow vulnerability that may allow an application to...

PT-2022-4162 · Zoom · Zoom Client For Meetings

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings for macOS versions 5.7.3 through 5.11.5 Description: The issue is related to a vulnerability in the auto update process, specifically due to incorrect cryptographic signature verification. This could allow a local...

PT-2022-21523 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.8 macOS versions prior to 12.5 Description: An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted AppleScript binary may result in unexpected termination or...

CVE-2022-26748

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution...