Apple Mac OS X Security Update (HT214083)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-23216

A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to overwrite arbitrary files...

CVE-2024-23216

CVE-2024-23216 is a path handling issue in macOS that allows an app to overwrite arbitrary files. Affected in macOS Sonoma 14.4, macOS Monterey 12.7.4, and macOS Ventura 13.6.5. The vulnerability is mitigated by upgrading to these patched OS versions; the description states improved validation as...

macOS 12.x < 12.7.4 Multiple Vulnerabilities (HT214083)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7.4. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,...

PT-2024-13071 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple macOS versions prior to Sonoma 14 Description: A path handling issue was addressed with improved validation, which may allow an app to break out of its sandbox...

CVE-2023-38565

A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges...

CVE-2021-30688

CVE-2021-30688 describes a path handling issue that allowed a malicious application to break out of its sandbox on macOS Big Sur 11.4 and Security Update 2021-003 Catalina. The issue is resolved by Apple via improved validation in the relevant components (noted across Apple’s HT212529/HT212530 se...

CVE-2021-30969

CVE-2021-30969 describes a path-handling vulnerability in macOS Help Viewer. The issue could allow processing a malicious URL to trigger unexpected JavaScript execution from a file on disk. Apple’s advisories indicate fixes were delivered in Security Update 2021-008 for macOS Catalina and also in...

CVE-2021-1800

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode...

CVE-2020-27896

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system...

CVE-2020-10010

CVE-2020-10010 describes a path handling issue that affects macOS and related Apple OS components, with a local attacker able to elevate privileges due to insufficient path validation. The issue is addressed by improved validation in the code paths involved, and is fixed in Apple platforms as fol...

PT-2020-16834 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 Description: A path handling issue was addressed with improved validation, allowing a remote attacker to potentially modify the file system. Recommendations: For versions prior to 11.0.1, update to macOS Big Sur...

CVE-2020-9994

CVE-2020-9994 is an Apple libxpc path handling vulnerability that could allow a malicious app to overwrite arbitrary files. The issue is addressed by Apple in updates for multiple platforms: iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. Connected documents provide...

CVE-2020-9920

A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicious mail server may overwrite arbitrary mail files...

Directory traversal

An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings...