Apple macOS Catalina Heimdal Component Information Disclosure Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Heimdal component of Apple macOS Catalina versions prior to 10.15.6. A local attacker can exploit this vulnerability to obtain sensitive user information...

Apple macOS Catalina out-of-bounds read vulnerability (CNVD-2020-65918)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina. A remote attacker could exploit the vulnerability to cause the execution of arbitrary code...

Unspecified Vulnerability in Apple macOS Catalina (CNVD-2020-65917)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina. A remote attacker can exploit the vulnerability to accidentally change the state of an application...

Apple macOS CoreGraphics JBIG2Bitmap Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreGraphics library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

Apple macOS process_token_CopyPixelsSrcFBO Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppleIntelKBLGraphic...

Apple macOS AppleVPA JPEG Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the AppleVPA...

(Pwn2Own) Apple macOS kextload Time-Of-Check Time-Of-Use Memory Corruption Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of kernel...

Apple macOS ImageIO EXR Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

(0Day) (Pwn2Own) Apple macOS Quarantine Attribute Bypass Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of download...

Unspecified Vulnerability in Apple macOS Catalina NSURL Component

Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers, and NSURL is one of the components used to handle URLs Uniform Resource Locators. A security vulnerability exists in the NSURL component in Apple macOS Catalina versions prior to 10.15.5. An attacker coul...

(Pwn2Own) Apple macOS Core Virtual Machine Service Heap-based Buffer Overflow Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Core...

Apple macOS Catalina Sandbox Component Unauthorized Access Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers, of which Sandbox is a sandbox component. A security vulnerability exists in the Sandbox component in Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit the vulnerability to access...

Apple macOS Catalina PackageKit Component Elevation of Privilege Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.PackageKit is an open-source suite of applications for installing and updating Linux software. A security vulnerability exists in the PackageKit component of Apple macOS Catalina versions prior to 10.15.5...

Apple macOS Catalina Intel Graphics Driver Component Buffer Overflow Vulnerability

Apple macOS Catalina is an Apple operating system developed specifically for Mac computers.The Intel Graphics Driver is one of the integrated graphics drivers. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS Catalina versions prior to 10.15.5. An attacker can...

Apple macOS Catalina Bluetooth component buffer overflow vulnerability (CNVD-2020-34637)

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A buffer overflow vulnerability exists in the Bluetooth component in Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit this vulnerabili...

Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

Apple macOS Catalina Apple HSSPI Support Component Memory Corruption Vulnerability

Apple macOS Catalina is the Apple HSSPI Support component of Apple's suite of specialized operating systems for Mac computers. A memory corruption vulnerability exists in the Apple HSSPI Support component of Apple macOS Catalina versions prior to 10.15.4. An attacker could exploit this...

Defying Covid-19’s Pall: Pwn2Own Goes Virtual

Covid-19 has brought the world to grinding halt, but for the hacking competition Pwn2Own, that wasn’t the case. The event, planned for CanSecWest this week in Vancouver, went virtual along with the conference itself. Faced with travel restrictions and new social-distancing guidelines, contestants...

CVE-2020-3866

This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Catalina 10.15.3. Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper...