The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability in the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the MobileInstallation component in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MobileInstallation component in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in system boundary enforcement. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability of the kernel in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the AudioToolboxCore component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AudioToolboxCore component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to the operation of processing AAC files where data may be written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of the Tailspin component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to increase their privileges.

The vulnerability of the Tailspin component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

IBM i Buffer Overflow Vulnerability

IBM i is a set of operating systems from IBM USA running in IBM Power Systems and IBM PureSystems. IBM i has a buffer error vulnerability that stems from incorrect software boundary checking, making the software vulnerable to stack-based buffer overflow attacks, which could be exploited by a loca...

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari on iOS, iPadOS, tvOS, watchOS, and macOS lies in type conversion errors, allowing attackers to execute arbitrary code.

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari operating systems—iOS, iPadOS, tvOS, watchOS, and macOS—is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Spoofing

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

Vulnerability of operating systems iOS, macOS, iPadOS, watchOS, and tvOS, caused by a logical error during authentication procedures, allowing attackers to trigger a service denial

The vulnerability of operating systems such as iOS, macOS, iPadOS, watchOS, and tvOS arises due to a logical error during the authentication process. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Microsoft Security Update Validation Report November 2021

Microsoft’s November 2021 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

CVE-2021-3063

An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that causes the service to stop responding...

The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems allows a perpetrator to cause service failures.

The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ALBA-2021:4533 ibus bug fix update

The Intelligent Input Bus IBus is an input method framework for multilingual input in Unix-like operating systems. Bug fix: Previously, in GNOME Wayland desktop in AlmaLinux 8.5, the IBus emoji candidate pop-up was used with IBus UI and the selected candidate could not inserted into the target...

CISA Releases Security Advisory on Siemens Nucleus Real-Time Operating Systems

CISA has released an Industrial Control Systems ICS advisory detailing multiple vulnerabilities found in Siemens Nucleus Real-Time Operating Systems RTOS and supporting libraries. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2021-89693)

Mozilla Firefox, commonly known as "Firefox" in Chinese, is a free and open source web browser developed by Mozilla that uses the Gecko typography engine and supports multiple operating systems. It can cause a denial of service when Firefox browser parameters are arbitrarily changed. An attacker...

CVE-2021-29993

Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 92...

Code injection

Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 92...

CVE-2021-29993

Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 92...

VulnCheck KEV: CVE-2020-9859

Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges...

CVE-2021-30823

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS...