Apple macOS Arbitrary Code Execution Vulnerability (CNVD-2020-03281)

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.Disk Management is one of the components of Disk Management. A security vulnerability exists in Disk Management in Apple macOS Mojave version 10.14.5. The vulnerability can be exploited by an attacker to execu...

Adobe Media Encoder Out-of-Bounds Read Vulnerability (CNVD-2019-41626)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS platforms. An attacker can exploit this vulnerability to obtain sensitive...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to...

Apple macOS Catalina IOGraphics Component Buffer Overflow Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.IOGraphics is one of the input and output graphics components. A buffer overflow vulnerability exists in the IOGraphics component of Apple macOS Catalina versions prior to 10.15.1. A local attacker...

Objective Development Software Little Snitch privileged helper tool privilege vulnerability

Objective Development Software Little Snitch is a host-based firewall for macOS applications from Objective Development Software, Austria. privateged helper tool is one of the helper tools. A privileged helper tool vulnerability in Objective Development Software Little Snitch versions 4.3.0 throu...

Unspecified Vulnerability in Apple macOS High Sierra Accounts Component

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Accounts is one of the user account components. A security vulnerability exists in the Accounts component of Apple macOS High Sierra versions prior to 10.13.6. No details of the vulnerability are...

Apple iOS and Apple macOS Mojave iBooks Component Misconfiguration Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple macOS Mojave is a specialized operating system for Mac computers. iBooks is an e-book component of iBooks. A misconfiguration vulnerability exists in the iBooks component in...

CVE-2018-4400

A validation issue was addressed with improved logic. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, watchOS 5.1...

CVE-2018-4051

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories...

Apple iOS and Apple macOS Mojave Messages Information Disclosure Vulnerability

Apple iOS and Apple macOS Mojave are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple macOS Mojave is a specialized operating system developed for Mac computers. messages is one of the application components used to send text. photos and videos,...

Pixar Renderman Input Validation Vulnerability

Pixar Renderman is a rendering application used in animation and movie production. An input validation vulnerability exists in the Installation Helper tool in version 22.2.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to read the root file from...

Pixar Renderman Elevation of Privilege Vulnerability

Pixar Renderman is a rendering application used in animation and movie production. A local elevation of privilege vulnerability exists in the Installation Assistant tool in version 22.3.0 of Pixar Renderman for Mac OS X-based platforms. A local attacker can exploit the vulnerability to elevate...

CVE-2019-5015

A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine for a successful exploit...

CVE-2019-6223

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer...

CVE-2019-6235

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions...

DEBIAN-CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

Unspecified Vulnerability in Apple iOS, tvOS and OS X El Capitan CFNetwork Proxies

Apple iOS, tvOS, and OS X El Capitan are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is an operating system for smart TVs; and OS X El Capitan is a purpose-built operating system for Mac computers.CFNetwork Proxies is a component of CFNetwork that handles prox...

Google Chrome for macOS Fullscreen UI Fake Vulnerability

Google Chrome for macOS is a web browser developed by Google for the macOS platform.Fullscreen is one of the fullscreen components. A security vulnerability exists in Fullscreen in versions of Google Chrome prior to 66.0.3359.117 for macOS. A remote attacker can exploit this vulnerability to spoo...

UBUNTU-CVE-2018-6100

Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

1Password for macOS Information Disclosure Vulnerability

1Password for macOS is a macOS-based application for storing and managing personal passwords. An information disclosure vulnerability exists in version 7.2.3.BETA prior to 1Password 7.2.3.BETA-3 for macOS-based platforms, which can be exploited by attackers to obtain sensitive information...