CVE-2024-23233

CVE-2024-23233 affects macOS Sonoma 14.4 (and prior) where entitlements and privacy permissions granted to an app could be leveraged by a malicious app. The issue was addressed with improved checks and is fixed in macOS Sonoma 14.4. Affected component is the entitlement/privacy-permission handlin...

PT-2024-19728 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: The issue allows entitlements and privacy permissions granted to an app to be used by a malicious app. This was addressed with improved checks. Recommendations: For macOS Sonoma versions prior ...

Insomnia security breach

Insomnia is an open source, cross-platform API client from Insomnia for GraphQL, REST, WebSockets, server-sent events, and gRPC. A security vulnerability exists in Insomnia version 2023.4.0 that stems from the use of the DYLDINSERTLIBRARIES environment variable that can execute code and access...

CVE-2023-32400

This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2023-32400

This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

Design/Logic Flaw

This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2023-32400

This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2023-32400

This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2023-32400

CVE-2023-32400 involves a privacy/entitlements issue where entitlements and privacy permissions granted to an app may be used by a malicious app. The description notes this may enable a malicious actor to exploit granted permissions, and that Apple addressed the issue with improved checks. Affect...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.4, which arises from the possibility that rights and privacy permissions granted to this application could be used by malicious applications...

CVE-2021-30757

This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

Design/Logic Flaw

This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2021-30757

This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2021-30757

CVE-2021-30757 affects Apple iMovie; the issue concerns entitlements and privacy permissions granted to iMovie that could be used by a malicious app. Apple addressed the vulnerability by enabling hardened runtime, and the fix is available in iMovie 10.2.4. Affected component: iMovie’s entitlement...

CVE-2021-30757

This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

Apple 多款产品信息泄露漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Big Sur is a mobile app app.Apple macOS Big Sur is a mobile app app.Apple iOS is an operating system developed for mobile...

PT-2021-18847 · Apple · Imovie

Name of the Vulnerable Software and Affected Versions: iMovie versions prior to 10.2.4 Description: The issue allows a malicious app to potentially use entitlements and privacy permissions granted to the affected software. This could lead to unauthorized access or misuse of sensitive information...

About the security content of iMovie 10.2.4

About the security content of iMovie 10.2.4 This document describes the security content of iMovie 10.2.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Malicious App Infects 60,000 Android Devices – But Still Saves Their Batteries

UPDATE A battery-saving app that also allows attackers to snatch text messages and read sensitive log data has been downloaded by more than 60,000 Android devices so far. But what’s unique about the attack, according to the researchers at RiskIQ who discovered it, is that it holds true to its...

What Facebook’s Cambridge Analytica problem means for your data

As you may already know, there's been a security meltdown at Facebook, thanks to a company called Cambridge Analytica and Donald Trump. Facebook CEO Mark Zuckerberg insists it wasn't a breach, which is technically true. But that doesn't change the fact that the data of 50 million users was obtain...