PT-2024-5133 · Zoom · Zoom Workplace Desktop App

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Desktop App for macOS versions prior to 6.0.10 Description: The issue is related to an uncontrolled search path element in the installer, which may allow an authenticated user to conduct a denial of service via local access. Th...

CVE-2024-30165

Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions, a different vulnerability than CVE-2024-30164...

CVE-2024-31952

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via arbitrary file permission writes. The attacker must already have user privileges, and an administrator password must be entered during the...

Corel Parallels Desktop 安全漏洞

Parallels Desktop is a virtual machine management software that runs on mac computers and allows users to easily run Windows/Linux operating systems and applications under macOS. A malicious program in quarantine can escape through the virtual machine to execute arbitrary code in the host compute...

PT-2024-21773 · Zoom · Zoom Desktop Client For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for macOS versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow a privileged user to conduct an escalation of privilege via local access...

PT-2024-22112 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.4 Description: A path handling issue was addressed with improved validation, which may allow an app to access user-sensitive data. Recommendations: For versions prior to 14.4, update to macOS Sonoma 14.4 to resolve...

PT-2024-15332 · Hypr · Hypr Workforce Access

Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7.1 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows file manipulation in HYPR Workforce Access on MacOS...

The vulnerability of the AppleVA component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleVA component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of CoreMedia’s component in the macOS operating system allows a intruder to gain unauthorized access to the camera.

The vulnerability of CoreMedia’s macOS component is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the camera...

CVE-2024-23740

An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...

CVE-2024-23741

An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings...

Exploit for Code Injection in Miro

CVE-2024-23746 Miro Desktop 0.8.18 on macOS allows Electron co...

CVE-2023-6336

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

The vulnerability of the WebKit component of the macOS operating system, allowing a hacker to execute arbitrary code

The vulnerability of the WebKit component of the macOS operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created link...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

The vulnerability of the AppleGraphicsControl component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleGraphicsControl component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the AppleGraphicsControl component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleGraphicsControl component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-49314

Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack...

Exploit for Code Injection in Horsicq Xmachoviewer

CVE-2023-49313 A dylib injection vulnerability in XMachOViewer...

Mozilla: MozillaVPN: Elevation of Privilege via a Race Condition Vulnerability

A race condition vulnerability was discovered in Mozilla VPN that led to local privilege escalation to root on macOS. The vulnerability existed during the installation or update process, where a local attacker could replace the VPN binary with a malicious one that would execute as root. The issue...