CVE-2023-40447

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution...

CVE-2023-42841

CVE-2023-42841: The issue is addressed by improved memory handling and is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, and macOS Ventura 13.6.1. Description states: an app may be able to execute arbitrary code with kernel privileges. This is confirmed by con...

CVE-2023-42841

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-42841

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory...

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory...

CVE-2023-40416

CVE-2023-40416 affects Apple ImageIO: processing an image may disclose process memory. Fixed in iOS 17.1 / iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 / iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. The Nessus/OpenVAS entries corroborate the vulnerability family (memory disclosure vi...

macOS 13.x < 13.6.1 Multiple Vulnerabilities (HT213985)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.1. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS...

PT-2023-8349 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.1 macOS versions prior to 13.6.1 macOS versions prior to 14.1 Description: The issue is caused by a buffer overflow in the Model I/O framework of the macOS operating system. Processing a file may lead to unexpecte...

PT-2023-8355 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 Description: The issue is related to improved memory...

About the security content of macOS Ventura 13.6.1

About the security content of macOS Ventura 13.6.1 This document describes the security content of macOS Ventura 13.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

macOS 12.x < 12.7.1 Multiple Vulnerabilities (HT213983)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7.1. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey...

CVE-2023-5633

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...

Ubuntu 16.04 ESM : Scilab vulnerabilities (USN-5061-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5061-1 advisory. It was discovered that Scilab did not properly sanitize XML inputs. An atacker could use a crafted XML file to cause a denial of service or possibly...

USN-6432-1 quagga vulnerabilities

It was discovered that the Quagga BGP daemon did not properly check the attribute length in NRLI. A remote attacker could possibly use this issue to cause a denial of service. CVE-2023-41358 It was discovered that the Quagga BGP daemon did not properly manage memory when reading initial bytes of...

USN-6404-2 firefox regressions

USN-6404-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted...

Buffer Over-read

gpac is vulnerable to Buffer Over-read. This vulnerability allows an attacker to execute arbitrary code on a vulnerable system by exploiting a bug in the way gpac handles memory...

USN-6420-1 vim vulnerabilities

It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. CVE-2022-3235, CVE-2022-3278,...

USN-6420-1: Vim vulnerabilities

It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. CVE-2022-3235, CVE-2022-3278,...

Ubuntu: Security Advisory (USN-6420-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...