CVE-2021-30852

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

Apple iOS 和 iPadOS 资源管理错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.The vulnerability is caused by a resource management error in Apple iOS and iPadOS WebKit. A resource management error...

多款Apple产品安全漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple watchOS is a smartwatch operating system. A security...

PT-2021-5659

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 Safari versions prior to 15.2 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 Description An integer overflow issue has been addressed wit...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple Apple. A buffer overflow vulnerability exists in Apple tvOS. The vulnerability stems from a memory corruption. An attacker can cause code execution via maliciously crafted web content...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple. A security vulnerability exists in several Apple products that stems from a type confusion issue. An attacker could cause code execution via maliciously crafted web content, which is fixed in iOS 14.8 and iPadOS...

Apple iOS 和 iPadOS 输入验证错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An input validation error vulnerability exists in Apple iOS and iPadOS WebKit, which could lead to arbitrary code executio...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. Apple iOS and iPadOS have a buffer error vulnerability that stems from. The buffer overflow issue is addressed through...

Apple iOS 和 iPadOS 竞争条件问题漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A competitive conditions issue exists in Apple iOS and iPadOS, where processing of maliciously crafted web content ma...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from the U.S. company Apple. A buffer error vulnerability exists in multiple Apple products, which could allow an attacker to cause arbitrary code execution via maliciously crafted web content. The vulnerability is fixed in the following products...

PT-2021-18914 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.8 iPadOS versions prior to 14.8 tvOS versions prior to 15 watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 Description: A type confusion issue was addressed with improved memory handlin...

CVE-2021-30858

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

PT-2021-6567 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Safari version 15 tvOS version 15 watchOS version 8 iOS version 15 iPadOS version 15 Description: A memory corruption issue was addressed with improved locking. Processing maliciously crafted web content may lead to code execution. The...

Apple tvOS 权限许可和访问控制问题漏洞

Apple tvOS is a suite of smart TV operating systems from the U.S. company Apple. A vulnerability in privilege permission and access control issues exists in various Apple products, where processing of maliciously crafted web content could result in unintended content security policy...

Pimcore Formula Injection Vulnerability

Pimcore is a set of open source Web content management platform for creating and managing Web applications from Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications.Pimcore versions prior to 10.1.1 have a...

Updated webkit2 packages fix security vulnerabilities

Updated webkit2 packages fix security vulnerabilities: A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to...

Privilege Escalation

serverless-offline is vulnerable to privilege escalation. The vulnerability exists in createAuthScheme function of createAuthScheme.js due to an insecure access control from a misinterpreted HTTP status code which allows an attacker to download a web content page via malicious URL...

CVE-2021-32768

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions failing to properly parse, sanitize and encode malicious rich-text content, the content rendering process in the website frontend is vulnerable to cross-site scripting. Corresponding...