CVE-2020-28362

A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The...

Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day

iPhone users, drop what you’re doing and update now: Apple has issued a warning about a ream of code-execution vulnerabilities – some of which are remotely exploitable – and experts are emphatically recommending an ASAP update to version 14.7 of iOS and iPadOS. Unfortunately, you aren’t getting a...

Updated XCSSET Malware Targets Telegram, Other Apps

In our last update on the XCSSET campaign, we updated some of its features targeting latest macOS 11 Big Sur. Since then, the campaign added more features to its toolset, which we have continually monitored. We have also discovered the mechanism used to steal information from various apps, a...

Vulnerabilities fixed in Apple Mac OS

Apple has fixed vulnerabilities in Apple MacOS Big Sur, Catalina and Mojave. A malicious person could exploit them to cause the following types of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote code execution User rights...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error when processing audio files in the CoreAudio subsystem. A remote attacker can exploit the vulnerability to create a specially...

PT-2021-18857

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Description A logic issue was addressed with improved validation, which could allow a malicious application to gain root...

PT-2021-18868

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 macOS Catalina versions prior to Security Update 2021-004 iCloud for Windows versions prior to 12.5 iTunes for Windows...

PT-2021-18842

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 Description A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges...

PT-2021-18863

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Security Update versions prior to 2021-005 for Mojave Security Update versions prior to 2021-004 for Catalina Description...

Apple macOS Big Sur 资源管理错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from a resource management error vulnerability that stems from a resource management error when WebKit processes HTML content. A remote attacker can exploit the vulnerability by creating a special...

PT-2021-19043

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 7.6 tvOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 Description A permissions issue was addressed with improved validation, which may allow a malicious application to bypass certain Privacy preference...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security pages for the following products and apply the...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a buffer error vulnerability that stems from a boundary error in Model I/O. A remote attacker can exploit the vulnerability to create a specially crafted file, trick a victim into opening it,...

PT-2021-18861

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Description A malicious application may be able to bypass Privacy preferences. This issue was addressed with improved entitlements. Recommendations For macOS Big Sur versions prior to 11.5, update to macOS...

PT-2021-13599

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 7.6 macOS Big Sur versions prior to 11.5 Description: A logic issue was addressed with improved state management. Visiting a maliciously crafted webpage may lead to a system denial of service. Recommendations: For...

PT-2021-18852

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Security Update versions prior to 2021-004 Catalina Security Update versions prior to 2021-005 Mojave Description An out-of-bounds write issue was addressed with improved input validation, which may allow a...

PT-2021-18856

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Description A malicious application may be able to gain root privileges due to this issue. The estimated number of potentially affected devices worldwide is not specified. This issue was addressed with...

PT-2021-18854

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Security Update versions prior to 2021-004 Catalina Description A logic issue was addressed with improved validation,...

PT-2021-18859

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Security Update versions prior to 2021-004 Catalina Description A logic issue was addressed with improved validation...

PT-2021-18874

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 Description An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted file may disclose user information. Recommendations For iOS...