Apple macOS 注入漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An injection vulnerability exists in macOS due to insufficient validation of user-supplied input within the ImageIO component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1...

PT-2021-7320 · Apple +7 · Macos Monterey +12

Name of the Vulnerable Software and Affected Versions: WPE WebKit versions prior to the fixed version iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS...

PT-2021-2369 · Cisco · Cisco Jabber For Windows +2

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Cisco Jabber for MacOS affected versions not specified Cisco Jabber for mobile platforms affected versions not specified Description: The issue is related to insufficient input validati...

Keybase Desktop Client Security Vulnerability

Keybase is a social networking platform that supports end-to-end encryption based on PGP technology. A security vulnerability exists in the Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, which allows an attacker to obtain potentially sensitive media in the...

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Apple IOSkywalkFamily Buffer Error Vulnerability

Apple IOSkywalkFamily is a core component of Apple Inc. that is used to provide management network driver functionality for mobile devices. A security vulnerability exists in Apple IOSkywalkFamily that originates from a boundary condition within the IOSkywalkFamily component in macOS. A local use...

Apple Power Management Security Vulnerability

Apple Power Management is the power management program for Apple devices from Apple, Inc. A security vulnerability exists in Apple Power Management that allows a local application to escalate privileges on the system. The following products and versions are affected: macOS: 10.3, 10.12.4, 10.12.5...

Apple ImageIO Security Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO that could allow a remote attacker to compromise an affected system. The following products and versions are affected: macOS: 10.15, 10.15...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A buffer error vulnerability exists in Apple ImageIO that could allow a remote attacker to access potentially sensitive information. The following products and versions are affected: macOS...

CVE-2020-26085

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system OS with elevated privileges or gain access to sensitive information. For more information about these...

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS where processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected: macOS Mojave 10.14.6,...

CVE-2020-9977

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to determine a user's open tabs in Safari...

PT-2020-11847 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: An issue existed within the path validation logic for symlinks, which was addressed...

CVE-2020-9871

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may...

PT-2020-20822 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 iTunes for Windows versions prior to 12.10.8 iCloud for Windows versions prior to...

Adobe Dreamweaver Uncontrolled Search Path Element Vulnerability

Adobe Dreamweaver is the United States of America Odooby Adobe company a Windows-based platform to support visual HTML editing and code editing software. A security vulnerability exists in Adobe Dreamweaver, which exists on Windwos/MacOS platforms and can be exploited by attackers to extract powe...

PT-2020-20821 · Apple · Macos Catalina +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.6 Apple iPadOS versions prior to 13.6 Apple macOS Catalina versions prior to 10.15.6 Apple tvOS versions prior to 13.4.8 Description: A logic issue was addressed with improved validation, allowing an attacker wi...

Apple Safari Reader Component Logic Flaw Vulnerability

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari Reader is one of the reader components.... A security vulnerability exists in the Safari Reader component in Apple Safari versions prior to 13.1.2, iOS versions...

CVE-2019-3617

Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabilities could...