PT-2022-18066 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: The issue allows a malicious application to bypass Privacy preferences. This was addressed with additional permissions checks. Recommendations: For macOS version...

CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

Mac users, update now! “Powerdir” flaw could allow attackers to spy on you

If you have been forgoing updating your Mac, this article might make you think twice. The Microsoft 365 Defender Research Team has discovered a vulnerability in macOS, which allows malicious apps to successfully bypass a users privacy preferences. This means attackers could access personal data...

Foxit PDF Reader 操作系统命令注入漏洞

Foxit PDF Reader is a PDF reader from China's Foxit Foxit Corporation. Foxit PDF Reader and PDF Editor have an operating system command injection vulnerability that originated in Foxit PDF Reader and PDF Editor before 11.1 on macOS that allows remote attackers to exploit the vulnerability to...

Old Gatekeeper bypass vulnerability in macOS exploited

THREAT LEVEL: Amber For a detailed advisory, download the pdf file here A gatekeeper bypass vulnerability exists in macOS Big Sur and has been assigned CVE-2021-30853. An attacker can exploit this issue by using a specially-crafted script-based application downloaded from the Internet. This allow...

CVE-2021-37850

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

Unspecified Vulnerability in Fortinet FortiClient (CNVD-2021-84249)

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in FortiClientMacOS...

PT-2021-18900 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 Description: The issue allows an attacker to write arbitrary files by unpacking a maliciously crafted archive. This is possible due to insufficient checks, which have been improved in the fixed version...

PT-2021-8247 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 macOS Big Sur versions prior to 11.6.2 Description: A logic issue was addressed with improved state management, allowing a malicious application to bypass Privacy preferences. This issue may lead to data leakage. ...

PT-2021-18924 · Apple +1 · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.6 Description: A logic issue was addressed with improved state management. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. The...

PT-2021-7281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 Description: A logic issue was addressed with improved state management, which could allow a malicious application to elevate privileges. The issue is related to insecure privilege management, potentially enabli...

PT-2021-18964 · Apple · Apple Macos +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 Description: The issue arises from a logic problem that has been addressed with improved restrictions, allowing an unprivileged application to potentially edit NVRAM...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS, which stems from the handling of maliciously created USD files that may disclose memory contents. The following products and versions are affected: iPhone 6...

CVE-2021-38567

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL pointer dereference, aka CNVD-C-2021-95204...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a vulnerability due to improper security restrictions, where a sandboxed process may be able to bypass the sandbox restrictions. The vulnerabilit...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. Apple macOS suffers from a buffer error vulnerability that originates from a boundary condition within the Model I/O subsystem. A remote attacker could exploit the vulnerability...

Apple macOS 竞争条件问题漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a Competitive Condition Issue, which originates from a Competitive Condition in Heimdal. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1...

Apple macOS 信息泄露漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. An information disclosure vulnerability exists in macOS, which stems from an authentication issue in the CoreFoundation component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1...

The vulnerability of the web page rendering module in WebKitGTK of Apple MacOS operating systems, related to incorrect handling of logical operations, allows an attacker to execute arbitrary code.

The vulnerability of the web page rendering module in WebKitGTK on Apple MacOS operating systems is related to incorrect handling of logical operations. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS has a security vulnerability that can be exploited by attackers to disable anti-virus protection...