A week in security (May 9 – 15)

Last week on Malwarebytes Labs: How to spot the signs of a virtual kidnap scam Virtual credit cards coming to Chrome: What you need to know Clearview AI banned from selling facial recognition data in the US Cyberattacks on SATCOM networks attributed to Russian threat actors F5 BIG-IP vulnerabilit...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

PT-2022-21549 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: The issue allows an app to bypass Privacy preferences. It was addressed with improved checks. Recommendations: For macOS versions prior to 12.4, update to macOS...

PT-2022-18033 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to macOS Monterey 12.4 macOS versions prior to macOS Big Sur 11.6.6 macOS Catalina versions prior to Security Update 2022-004 Description: A malicious application may be able to access restricted files due to this issue...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that originates from a boundary error in SMB. A remote attacker can exploit this vulnerability ...

Apple macOS Big Sur 访问控制错误漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur, the U.S. company used by Apple for the MAC operating system macOS. Apple macOS Big Sur suffers from an Access Control Error vulnerability that stems from improperly restricting access to SoftwareUpdate, which can be exploited...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur is the 17th major version of Apple's macOS for MAC operating system. Apple macOS Big Sur has a security vulnerability that originates from a CVMS initialization error, which can be exploited by an attacker to elevate privilege...

PT-2022-21473 · Apple · Apple Macos +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 macOS Catalina versions prior to Security Update 2022-004 Description: A logic issue was addressed with improved state management, which may allow an app to gain elevated...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the Intel Graphics Driver. An attacker exploiting this...

PT-2022-18029 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: A memory corruption issue was addressed with improved input validation. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

PT-2022-18066 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: The issue allows a malicious application to bypass Privacy preferences. This was addressed with additional permissions checks. Recommendations: For macOS version...

PT-2022-21461 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Big Sur versions prior to 11.6.8 macOS Catalina versions prior to Security Update 2022-005 Description: The issue allows an app with root privileges t...

Apple macOS Big Sur 安全特征问题漏洞

Apple macOS Big Sur is the 17th major release of Apple's macOS Big Sur, Apple's operating system for the MAC, macOS. Apple macOS Big Sur versions 12.0 21A344 through 12.3.1 21E258 suffer from a security signature issue vulnerability that originates in the system Tcl component. An attacker can...

PT-2022-18060 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 15.5 iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Big Sur versions prior to 11.6.6 macOS Monterey versions prior to 12.4 watchOS versions prior to 8.6 macOS Catalina versions prior to Security Update...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur, the U.S. company used by Apple for the MAC operating system macOS. Apple macOS Big Sur suffers from a Privilege Permission and Access Control Issue vulnerability that stems from an incorrect security restriction. An attacker...

Apple macOS Big Sur 安全特征问题漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur, the U.S. Apple's macOS Big Sur is the 17th major version of macOS, the operating system used by Apple for the MAC. A security signature issue vulnerability exists in the Apple macOS Big Sur component, which can be exploited b...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur, the operating system used by Apple for the MAC operating system macOS. Apple macOS Big Sur suffers from a privilege permission and access control issue vulnerability that stems from improper security checks in the CoreTypes...

PT-2022-4905 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 15.5 watchOS versions prior to 8.6 iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 macOS Catalina versions prior to Security Update...