CVE-2018-10405

CVE-2018-10405 concerns Google Santa and molcodesignchecker, where a maliciously crafted Universal/Fat binary can bypass third‑party code signing checks. The vulnerability arises from incomplete inspection of Fat binaries, allowing an unsigned malicious payload to be executed while a legitimate A...

CVE-2018-10407

CVE-2018-10407 affects Carbon Black Cb Response. A maliciously crafted Universal/Fat binary can bypass third‑party code signing checks, causing the unsigned payload to execute while the signed Apple image is treated as legitimate. Exploitation relies on embedding unsigned Mach‑O binaries inside a...

CVE-2018-10406

An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious...

CVE-2018-10404

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...

CVE-2018-10407

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-10403

CVE-2018-10403 affects F-Secure XFENCE and Little Flocker, describing a vulnerability where a maliciously crafted Universal/Fat binary can bypass third-party code-signing checks, causing unsigned code to execute while appearing signed by Apple. Root cause: improper handling of multi-architecture ...

Google Santa Code Signing Bypass (macOS)

The installed version of Google Santa is less than 0.9.25 and is therefore vulnerable to allowing execution of malicious binaries due to accepting forged Apple signatures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110519; scriptversion"1.6";...

Bypass Glitch Allows Malware to Masquerade as Legit Apple Files

Masquerading as an official Apple system file sounds like a wonderful way for malware to worm its way onto Macs – and a recently discovered code-signing bypass flaw allows bad code to do just that. The way some developers have implemented Apple’s official code-signing API can be exploited by...

Signature Validation Bug Let Malware Bypass Several Mac Security Products

A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the security check, potentially leaving millions of Apple users vulnerable to hackers. Josh Pitts, a researcher...

Signature Validation Bug Let Malware Bypass Several Mac Security Products

A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the security check, potentially leaving millions of Apple users vulnerable to hackers. Josh Pitts, a researcher...

CVE-2018-9322

The Head Unit HUNBT aka Infotainment component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware...

CVE-2018-9322

The Head Unit HUNBT aka Infotainment component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware...

CVE-2018-9322

The CVE-2018-9322 entry describes a vulnerability in the Head Unit HU_NBT (Infotainment) used in BMW i/X/3/5/7 Series vehicles from 2012–2018. A local attacker with access to USB or OBD-II interfaces can bypass the firmware update code-signing protection, enabling execution of unsigned firmware a...

Apple macOS High Sierra LaunchServices Security Bypass Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed by Apple Inc. for Mac computers.LaunchServices is one of the components that opens other applications or documents using a running application. A security vulnerability exists in the LaunchServices component in Apple...

CVE-2018-4175

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app...

CVE-2018-4175

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app...

CVE-2018-4175

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app...

CVE-2018-4175

CVE-2018-4175 affects macOS LaunchServices prior to 10.13.4. A crafted app could bypass code-signing protection, enabling execution of modified Terminal and potentially arbitrary commands. Apple released macOS 10.13.4/security updates (HT208692) addressing this by enforcing code-signing protectio...

Apple Mac OS X Security Updates (HT208692)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...