Lucene search
+L

907 matches found

ThreatPost
ThreatPost
•added 2021/03/18 7:42 p.m.•48 views

Trojanized Xcode Project Slips MacOS Malware to Apple Developers

Cybercriminals are targeting Apple developers with a trojanized Xcode project, which once launched installs a backdoor that has spying and data exfiltration capabilities. Xcode is comprised of a suite of free, open software development tools developed by Apple for creating software for macOS, iOS...

6.3AI score
SaveExploits0References6
CNVD
CNVD
•added 2021/02/24 12:00 a.m.•43 views

Apple Xcode has an unspecified vulnerability

Apple Xcode is an integrated development environment provided by Apple for developers to develop applications for Mac OS X and iOS. Apple Xcode 12.4 contains a security vulnerability that could be exploited by attackers to access arbitrary files on the host device...

5.5CVSS4.4AI score0.00642EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/01/28 12:00 a.m.•37 views

Apple Xcode Path Traversal Vulnerability (HT212153)

Apple Xcode is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescripti...

9.3CVSS7.2AI score0.10047EPSS
SaveExploits2References1
NCSC
NCSC
•added 2021/01/27 12:00 a.m.•14 views

Vulnerability fixed in Apple XCode

Apple has fixed a vulnerability in XCode. A malicious could potentially exploit the vulnerability to gain access to arbitrary files and thus sensitive data. The malicious party must entice the victim to install a malicious application. -= Apple =- Apple has made updates available for XCode to fix...

5.5CVSS6.7AI score0.00642EPSS
SaveExploits0
CISA
CISA
•added 2021/01/27 12:00 a.m.•25 views

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users to review the Apple security pages for the following products and apply the necessary...

7AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2021/01/27 12:00 a.m.•16 views

Apple Xcode 安全漏洞

Apple Xcode is an integrated development environment provided by Apple for developers to develop applications for Mac OS X and iOS. Apple Xcode 12.4 contains a security vulnerability that could be exploited by attackers to access arbitrary files on the host device...

5.5CVSS6.2AI score0.00642EPSS
SaveExploits0References4
Apple
Apple
•added 2021/01/26 11:15 a.m.•83 views

About the security content of Xcode 12.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

5.5CVSS0.2AI score0.00642EPSS
SaveExploits0Affected Software2
Apple
Apple
•added 2021/01/26 12:00 a.m.•365 views

About the security content of Xcode 12.4

About the security content of Xcode 12.4 This document describes the security content of Xcode 12.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

5.5CVSS5.6AI score0.00642EPSS
SaveExploits0References1Affected Software1
Apple
Apple
•added 2020/11/12 10:19 a.m.•73 views

About the security content of Xcode 12.0 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS8.1AI score0.02986EPSS
SaveExploits1Affected Software2
OSV
OSV
•added 2020/10/27 8:15 p.m.•11 views

CVE-2019-8840

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges...

8.8CVSS7.8AI score0.01329EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/27 8:15 p.m.•35 views

CVE-2019-8840

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges...

8.8CVSS8.3AI score0.01329EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/27 7:54 p.m.•37 views

CVE-2019-8840

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges...

8.4AI score0.01329EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/27 7:54 p.m.•120 views

CVE-2019-8840

CVE-2019-8840 affects Apple Xcode (ld64) where an out-of-bounds read was caused by insufficient bounds checking. Impact: compiling with untrusted sources may allow arbitrary code execution with user privileges. Affected/product: Xcode (ld64 component) on macOS. Root cause: out-of-bounds read due ...

8.8CVSS8.3AI score0.01329EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/27 12:00 a.m.•2 views

CVE-2019-8840: Out-of-bounds Read

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges...

8.8CVSS6.3AI score0.01329EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/10/16 4:56 p.m.•49 views

CVE-2020-9992

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device...

7.5AI score0.02986EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•2 views

CVE-2020-9992: Undefined Security Weakness

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device...

9.3CVSS6.4AI score0.02986EPSS
SaveExploits1References1
CISA
CISA
•added 2020/09/17 12:00 a.m.•16 views

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Apple...

6.9AI score
SaveExploits0References5
GithubExploit
GithubExploit
•added 2020/09/16 11:35 p.m.•256 views

Exploit for CVE-2020-9992

c0ntextomy an informal fallacy and a type of false attributi...

9.3CVSS8.7AI score0.02986EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2020/09/16 12:00 a.m.•13 views

PT-2020-20925 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.0 iPadOS versions prior to 14.0 tvOS versions prior to 14.0 watchOS versions prior to 7.0 Xcode versions prior to 12.0 Description: The issue allows an attacker in a privileged network position to execute arbitrary co...

9.3CVSS7.9AI score0.02986EPSS
SaveExploits1References12
Apple
Apple
•added 2020/09/16 12:00 a.m.•28 views

Apple Security Update: Xcode 12.0

Apple recommends to install security update Xcode 12.0 on devices macOS Mojave 10.15.4 and later...

6.7AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder