iOS26.6-CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB 읽기 KASLR 무력화 구성 요소: AppleKeyStore 커널 확장 — LibSerSEPControlDeserialize 영향: iOS / iPadOS 26.6 23G71 및 이전 버전 수정 버전: iOS / iPadOS 26.6.1 23G83 유형: SEP 제어 메시지 역직렬화 과정의 Out-of-Bounds 읽기 영향: 커널 포인터 유출 → 샌드박스 및 자격entitlement 없는 프로세스에서 KASLR 무력화 DYLDINTERPOSE ACM 핸들 캡처 경...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — AppleSEPKeyStore Use-After-Free CVE-2026-20637 · Enfilade · enfilade.io 구성 요소: AppleKeyStore 영향: 앱이 예기치 않은 시스템 종료를 유발할 수 있음. 설명: 향상된 메모리 관리를 통해 use-after-free 문제가 해결되었습니다. —Apple 보안 콘텐츠, iOS 26.3 및 iPadOS 26.3 대상 | ---|--- iOS| 26.1 – 26.2 테스트 완료 macOS| 26.1 – 26.2 테스트 완료 구성 요소|...

CVE-2026-65343-e7eb2ed

CVE-2026-65343 — AppleKeyStore OOB 읽기 KASLR 무력화 구성 요소: AppleKeyStore 커널 확장 — LibSerSEPControlDeserialize 영향 대상: iOS / iPadOS 26.6 23G71 및 이전 버전 수정 버전: iOS / iPadOS 26.6.1 23G83 유형: SEP 제어 메시지 역직렬화에서의 범위를 벗어난 읽기 영향: 커널 포인터 유출 → 샌드박스 내, 엔타이틀먼트 없는 프로세스로부터의 KASLR 무력화 DYLDINTERPOSE ACM 핸들 캡처 경유 크레딧 발견...

The vulnerability of the _LibSer_SEPControl Deserialize() function in the AppleKeyStore kernel extension of operating systems such as iOS, iPadOS, and macOS allows a malicious actor to disclose sensitive information.

The vulnerability of the LibSerSEPControl Deserialize function in AppleKeyStore kernel extensions for iOS, iPadOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this...

The vulnerability of the AppleKeyStore component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows a perpetrator to trigger a service failure.

The vulnerability of the AppleKeyStore component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious individual to cause a service failure...

About the security content of iOS 18.7.7 and iPadOS 18.7.7

About the security content of iOS 18.7.7 and iPadOS 18.7.7 About the security content of iOS 18.7.7 and iPadOS 18.7.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of macOS Sonoma 14.8.5

About the security content of macOS Sonoma 14.8.5 This document describes the security content of macOS Sonoma 14.8.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

EUVD-2015-1228

Malware in sbrugna...

Multiple Apple Products Sandbox Bypass Vulnerabilities

Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; watchOS is a smart watch operating system; macOS Mojave is a specialized operating system developed for Mac computers. apple macOS High Sierra is a specialized operating system developed by Apple f...

macOS 10.14.x < 10.14.3 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.3. It is, therefore, affected by multiple vulnerabilities related to the following components: - AppleKeyStore - Bluetooth - Core Media - CoreAnimation - FaceTime - IOKit - Kernel - libxpc - Natural Language...

About the security content of iTunes 12.9.3 for Windows

About the security content of iTunes 12.9.3 for Windows This document describes the security content of iTunes 12.9.3 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

About the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra

About the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra This document describes the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra. About Apple security updates For o...

About the security content of tvOS 12.1.2

About the security content of tvOS 12.1.2 This document describes the security content of tvOS 12.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple Mac OSX Kernel - AppleKeyStore Use-After-Free

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=710 The AppleKeyStore userclient uses an IOCommandGate to serialize access to its userclient methods, however by racing two threads, one of which closes the userclient which frees the IOCommandGate and one of which tries to make ...

Apple Mac OSX - Kernel AppleKeyStore Use-After-Free

Exploit for macOS platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=710 The AppleKeyStore userclient uses an IOCommandGate to serialize access to its userclient methods, however by racing two threads, one of which closes the userclient which frees...

Apple Mac OSX Kernel - AppleKeyStore Use-After-Free

Apple Mac OSX Kernel - AppleKeyStore Use-After-Free / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=710 The AppleKeyStore userclient uses an IOCommandGate to serialize access to its userclient methods, however by racing two threads, one of which closes the userclient which fre...

Apple iOS < 9.0 Multiple Vulnerabilities

Binary data 8979.prm...

APPLE-SA-2015-09-16-1 iOS 9

APPLE-SA-2015-09-16-1 iOS 9 iOS 9 is now available and addresses the following: Apple Pay Available for: iPhone 6, iPad mini 3, and iPad Air 2 Impact: Some cards may allow a terminal to retrieve limited recent transaction information when making a payment Description: The transaction log...