Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS. The vulnerabilities allow a malicious person possibly unauthenticated and remote able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Bypassing authentication Circumvention of security measure Remote code executi...

X (Formerly Twitter): Blind XSS on Twitter's internal Big Data panel at █████████████

An attacker appears to be able to send an XSS payload to Twitter staff members, using a Support Form. This XSS payload will execute in the context of an internal subdomain, allowing it to exfiltrate sensitive internal Twitter information...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. The macOS Big Sur vulnerability is an input validation error vulnerability that arises from a failure to adequately validate user-supplied input within the TCC subsystem, which could allow a malicious application to bypass privacy...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app by Apple Inc. A security vulnerability exists in macOS Big Sur, which can be exploited by a remote attacker on a local network to perform a MitM attack. Versions affected:macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64, 11.2....

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple Inc. A security vulnerability exists in macOS Big Sur, which arises from incorrect file path validation within the App Store component, allowing malicious applications to bypass implemented security restrictions. Versions affected: macOS:...

Apple Security Update: macOS Big Sur 11.4

Apple recommends to install security update macOS Big Sur 11.4 on devices macOS Big Sur 11.4...

Apple macOS Big Sur 访问控制错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An access control error vulnerability exists in macOS Big Sur, which stems from a feature that allows local users to gain unauthorized access to otherwise restricted functionality. Affected Versions:macOS: 11.0 20A2411, 11.0.1 20B29,...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. The macOS Big Sur suffers from a buffer error vulnerability that stems from allowing local users to upgrade privileges on the system. Affected Versions:macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64, 11.2.1...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. The macOS Big Sur suffers from a buffer error vulnerability that originates from a local user being able to run a specially designed program to trigger out-of-bounds writing and execution of arbitrary code with kernel privileges on t...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in macOS Big Sur, which originates from allowing a native application to overwrite arbitrary files. Affected Versions:macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64, 11.2.1...

Apple macOS Big Sur 授权问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. The macOS Big Sur suffers from an authorization issue vulnerability that originates from an attacker who has physical access to the system and can be exploited to gain unauthorized access to the system during a software update,...

PT-2021-18797 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.4 Security Update 2021-003 Catalina versions prior to the fixed version Description: An access issue was addressed with improved access restrictions, allowing a malicious application to potentially access a...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. macOS Big Sur suffers from a buffer error vulnerability that originates from a local user being able to run a specially designed program to trigger an out-of-bounds read error and read the contents of kernel memory on the system...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app by Apple Inc. The macOS Big Sur suffers from a buffer error vulnerability that originates from allowing local users to upgrade their privileges on the system. Versions affected:macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64,...

PT-2021-5767 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 14.1.1 tvOS versions prior to 14.6 iOS versions prior to 14.6 iPadOS versions prior to 14.6 macOS Big Sur versions prior to 11.4 watchOS versions prior to 7.5 Description: The issue is related to multiple memory...

golang: math/big: panic during recursive division of very large numbers

A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The...

webkitgtk: Memory initialization issue possibly leading to memory disclosure

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory...

webkitgtk: Logic issue leading to universal cross site scripting attack

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting...

Avaddon ransomware campaign prompts warnings from FBI, ACSC

Both the Australian Cyber Security Centre ACSC and the US Federal Bureau of Investigation FBI have issued warnings about an ongoing cybercrime campaign that is using Avaddon ransomware. The FBI states that is has received notifications of unidentified cyber actors using Avaddon ransomware against...

A Closer Look at the DarkSide Ransomware Gang

The FBI confirmed this week that a relatively new ransomware group known as DarkSide is responsible for an attack that caused Colonial Pipeline to shut down 5,550 miles of pipe, stranding countless barrels of gasoline, diesel and jet fuel on the Gulf Coast. Heres a closer look at the DarkSide...