ipsw-diffs

ipsw-diffs Differenze IPSW DIFFERENZE Navigazione rapida: iOS 26.6 · iOS 27.2 beta · iOS 27.0 · iOS 27.0 beta · iOS 26.7 · iOS 26.6 beta · iOS 26.5 · iOS 26.5 beta · iOS 26.4 · iOS 26.4 beta · iOS 26.3 · iOS 26.3 beta · iOS 26.2 · iOS 26.1 beta · iOS 26.0 · iOS 26.0 beta · iOS 18.7 · iOS 18.6 · i...

Wireshark 1.6.x < 1.6.15 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.15 advisory. - The dissectberchoice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark...

Wireshark 1.4.x < 1.4.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.14 advisory. - epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6....

CVE-2026-106588: Improper Isolation or Compartmentalization

In sshd in OpenSSH through 10.6, use of the macOS 27 or later SDK has the side effect of loss of sandboxing, which is potentially unexpected...

PT-2026-107286

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.7 Description In sshd, using the macOS 27 or later SDK results in the loss of sandboxing, which is a security mechanism used to isolate processes from the rest of the system to limit the impact of a potential...

Mozilla Firefox < 157.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 157.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-104 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio...

Karma Pro 0.14

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

PT-2026-106969

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-107084

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in the Core component on Mac allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs if the attacker has already compromised the...

Wireshark 1.12.x < 1.12.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.12 advisory. - epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles...

macOS 27.x < 27.0 Multiple Vulnerabilities (149035)

The remote host is running a version of macOS / Mac OS X that is 27.x prior to the full release of 27.0. It is, therefore, affected by multiple vulnerabilities: - A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process...

Wireshark 1.10.x < 1.10.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.13 advisory. - Integer overflow in the dissecttnef function in epan/dissectors/packet-tnef.c in the TNEF dissector...

PT-2026-106971

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in Chrome Tabs allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after fre...

Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in macOS Ventura 13, iOS 16.1, iPadOS 16, and Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution...

Astra Linux – Vulnerability in WebKit2GTK

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5, iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, and iTunes 12.12.4 for Windows. Processing maliciously crafted...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4, and iPadOS 15.4, as well as tvOS 15.4. A malicious website may cause unexpected cross-origin behaviors...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access FDA due to security risks posed by artificial intelligence AI agents. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their...

Apple iOS, iPadOS, and macOS Certificate Validation

Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS contain a certificate validation issue that could allow an attacker with a compromised intermediate certificate authority to issue certificates with arbitrary extended key usages...

Karma Pro 0.13

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...