About the security content of tvOS18.2

About the security content of tvOS18.2 This document describes the security content of tvOS 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Rece...

CVE-2024-12149

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases / ceph / zstd (CVE-2021-24032)

The version of CBL-Mariner Releases / ceph / zstd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-24032 advisory. - Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for...

CVE-2024-52872

CVE-2024-52872 affects Flagsmith prior to version 2.134.1. The vulnerability arises because the get_document endpoint is not correctly protected by permissions, potentially allowing unauthorized access to documents. The cited sources consistently state this issue for Flagsmith versions before 2.1...

CVE-2024-44217

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication...

CVE-2024-44196

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system...

CVE-2024-44203

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library...

CVE-2024-40792

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...

CVE-2024-40792

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...

CVE-2024-44217

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication...

CVE-2024-40792

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...

CVE-2024-44196

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system...

CVE-2024-44203

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library...

PT-2024-31029

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.1 macOS Sonoma versions prior to 14.7.1 Description: A permissions issue was addressed with additional restrictions. An application may be able to modify protected parts of the file system. Recommendations...

PT-2024-31047 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18 iPadOS versions prior to 18 Description: A permissions issue was addressed by removing vulnerable code and adding additional checks. Password autofill may fill in passwords after failing authentication. Recommendation...

PT-2024-41823

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A permissions issue allowed an application to access Contacts without user consent. This was addressed with additional restrictions. Recommendations Update to macOS version 15.1 or later...

PT-2024-7226

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.3 and prior Mitsubishi Electric GENESIS64 versions 10.97.3 and prior Mitsubishi Electric MC Works64 all versions Description The issue is related to incorrect default permissions in GenBroker32, which is includ...

DEBIAN-CVE-2024-9962

Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

OESA-2024-2229 apr security update

The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...

PT-2024-6668

Name of the Vulnerable Software and Affected Versions: Apache Hadoop versions prior to 3.4.0 Description: The issue is related to the RunJar.run function in Apache Hadoop, which does not set permissions for the temporary directory by default. This allows other local users to view sensitive data...