Malicious code in apple-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97f5fa89a33c919b4f7934cd8ef1928bd360bed99e4c38343623b05c019d8503 The OpenSSF Package Analysis project identified 'apple-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-391 Malicious code in apple-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b18eeeb5282535e8959e8e401a02971ab116425fce03d35ba50be1c2db0d6f1 The OpenSSF Package Analysis project identified 'apple-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in apple-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b18eeeb5282535e8959e8e401a02971ab116425fce03d35ba50be1c2db0d6f1 The OpenSSF Package Analysis project identified 'apple-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in apple-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11bd736afb32f1fa9fa0d7c3c7179f15862943e15465e8adb4b6ccea13130742 The OpenSSF Package Analysis project identified 'apple-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-390 Malicious code in apple-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11bd736afb32f1fa9fa0d7c3c7179f15862943e15465e8adb4b6ccea13130742 The OpenSSF Package Analysis project identified 'apple-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in apple-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1054f2c7b28ea826d1b98560fe419993d4d2f4bf88d863f28e52200fcdc784f The OpenSSF Package Analysis project identified 'apple-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-392 Malicious code in apple-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1054f2c7b28ea826d1b98560fe419993d4d2f4bf88d863f28e52200fcdc784f The OpenSSF Package Analysis project identified 'apple-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-388 Malicious code in apple-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc09ddd705cb61fae251b9ef88db7a9237d08d212eb332ee3ad9d511ecdebae7 The OpenSSF Package Analysis project identified 'apple-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in apple-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc09ddd705cb61fae251b9ef88db7a9237d08d212eb332ee3ad9d511ecdebae7 The OpenSSF Package Analysis project identified 'apple-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in apple-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7472f2e3c4be462937b9b2f925090cd83a2ba82bfa3e410284bc71df5a51c4a The OpenSSF Package Analysis project identified 'apple-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-389 Malicious code in apple-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7472f2e3c4be462937b9b2f925090cd83a2ba82bfa3e410284bc71df5a51c4a The OpenSSF Package Analysis project identified 'apple-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Apple WebKit WebCore ContainerNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple WebKit. User interaction is required to exploit this vulnerability. The specific flaw exists within the processing of Text objects. The issue results from the lack of validating the existence o...

BIT-PYTHON-MIN-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

Apple Security Update: tvOS 18.2.1

Apple recommends to install security update tvOS 18.2.1 on devices Apple TV HD and Apple TV 4K all models...

CVE-2024-54540

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app...

CVE-2024-54540

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app...

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution...

CVE-2024-40771

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel...

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing a file may lead to unexpected app termination or arbitrary code execution...

CVE-2024-40771

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, watchOS 10.5, tvOS 17.5, macOS Ventura 13.6.7, visionOS 1.2. An app may be able to execute arbitrary code with kernel...