40 matches found
CVE-2020-3839
CVE-2020-3839 corresponds to a validation/input sanitization issue in Apple macOS components (notably the Wi‑Fi IO80211Family path) that could allow an application to read restricted memory. The vulnerability is fixed in macOS Catalina 10.15.3. The available documents confirm a local impact vecto...
CVE-2020-3839
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.3. An application may be able to read restricted memory...
CVE-2019-8520
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read restricted memory...
Cross site scripting
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory...
Input validation
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory...
Cross site scripting
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read restricted memory...
Cross site scripting
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An application may be able to read restricted memory...
CVE-2019-8794
CVE-2019-8794 is a kernel validation issue described as a memory read access risk that can be triggered via an input sanitization vulnerability. The provided documents consistently state that the issue is fixed in iOS 13.2, iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1, and that...
CVE-2019-8817
CVE-2019-8817 (AppleGraphicsControl) is a macOS Catalina 10.15.1 fix for a validation issue that could allow an application to read restricted memory. The Apple advisory places this vulnerability in the AppleGraphicsControl component and notes that the issue was addressed by improved input saniti...
CVE-2019-8794
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to read restricted memory...
CVE-2019-8519
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An application may be able to read restricted memory...
CVE-2019-8519
CVE-2019-8519 is an out-of-bounds read vulnerability in macOS components that was mitigated by improved bounds checking. The issue could allow an application to read restricted memory and is addressed in macOS Mojave 10.14.4. Public references in the connected data confirm the root cause as an ou...
CVE-2019-8520
CVE-2019-8520 is an out-of-bounds read vulnerability in macOS that was addressed by improved bounds checking. The issue could allow a malicious application to read restricted memory and is fixed in macOS Mojave 10.14.4 (Security Update). The available sources consistently describe the fix as part...
Apple macOS Mojave Out-of-Bounds Read Vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers. An out-of-bounds read vulnerability exists in Apple macOS Mojave versions prior to 10.14.3. An attacker can exploit the vulnerability to read restricted memory...
CVE-2019-6220
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory...
CVE-2019-6231
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory...
USN-2979-1 linux vulnerabilities
David Matlack discovered that the Kernel-based Virtual Machine KVM implementation in the Linux kernel did not properly restrict variable Memory Type Range Registers MTRR in KVM guests. A privileged user in a guest VM could use this to cause a denial of service system crash in the host, expose...
PT-2012-1387 · Microsoft · Privatefirewall
Name of the Vulnerable Software and Affected Versions: PrivateFirewall version 7.0.20.37 Description: A race condition in PrivateFirewall on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked by...
CVE-2012-0014
CVE-2012-0014 describes a remote code execution flaw in Microsoft .NET Framework components (2.0 SP2, 3.5.1, 4) and Silverlight 4 prior to 4.1.10111, caused by improper restriction of memory access for unmanaged objects. Exploitation vectors include XBAP, crafted ASP.NET, .NET Framework, and Silv...