Memory Corruption Vulnerability in Kernel Components of Multiple Apple Products (CNVD-2020-61632)

Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers. A memory corruption vulnerability exists in the kernel component of Apple iOS prior to 13.6, iPadOS prior ...

CVE-2020-24439

Acrobat Reader DC for macOS versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a security feature bypass. While the practical security impact is minimal, a defense-in-depth fix has been implemented to further harden the Adobe Reader upda...

PT-2020-6106

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 10.15.3 Apple tvOS versions prior to 13.3.1 Apple watchOS versions prior to 6.1.2 Apple Safari versions prior to 13.1.1 Apple iTunes versions prior to 12.10.7 for Windows Apple iCloud for Windows versions prior to...

PT-2019-4014 · Palo Alto · Palo Alto Globalprotect Agent For Macos +1

Name of the Vulnerable Software and Affected Versions: Palo Alto GlobalProtect Agent for Linux versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for Linux versions 4.1.12 and earlier Palo Alto GlobalProtect Agent for MacOS versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for MacOS...

CVE-2018-4398

An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4353

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14...

Design/Logic Flaw

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2...

PT-2019-10828 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.6 Description: The issue is related to multiple memory corruption problems that have been addressed through improved memory handling. Recommendations: For versions prior to 10.13.6, update to macOS High Sierra...

Apple macOS AFP Server Attack Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. An AFP server attack vulnerability exists in afpserver in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. A remote attacker can exploit this vulnerability to attack the AFP server via an HTTP client...

CVE-2018-4141

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4173

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app...

CVE-2018-4160

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service out-of-bounds read via a crafted app...

CVE-2018-4132

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13832

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "802.1X" component. It allows attackers to have an unspecified impact by leveraging TLS 1.0 support...

PT-2017-13097 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.1 Description: The issue involves the "Kernel" component and allows attackers to bypass intended memory-read restrictions. This is achieved via a /dev/dtracehelper attack that involves the dtrace dif variable and...

CVE-2017-7129

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party "SQLite" product. Versions before 3.19.3 allow remote attackers to cause a denial of service...

CVE-2017-7025

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2017-6986

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

CVE-2017-2523

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-2487

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of...