About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2024-31056 · Apple · Xcode +1

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16 Description: The issue allows an app to potentially inherit Xcode permissions, enabling access to user data due to inadequate permissions checking. Recommendations: For versions prior to 16, update to Xcode 16 to...

macOS 14.x < 14.7 Multiple Vulnerabilities (121247)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18,...

About the security content of macOS Sequoia 15

About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2024-29114 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolv...

PT-2024-29111 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13.7.1 macOS versions prior to Sonoma 14.7.1 macOS versions prior to Sequoia 15 Description: A sandboxed application may be able to access sensitive user data due to insufficient checks. Recommendations: Update...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to information leaks through process environments, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to information leaks through the process environment. Exploiting these vulnerabilities can allow attackers operating remotely ...

The vulnerability in the collection of libraries and drivers for fast packet processing in dpdk, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the library and driver set for fast packet processing in dpdk is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

Vulnerabilities fixed in Ivanti Endpoint Manager

Ivanti has fixed vulnerabilities in Ivanti Endpoint Manager. Vulnerabilities have been fixed in Ivanti Endpoint Manager. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Remote code execution Administrator/Root privileges...

The vulnerability in the Firefox web browser, related to insufficient registration checks, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to insufficient verification of registrations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the net/wireless/nl80211.c component in the Linux operating system, related to improper energy consumption restrictions, allows attackers to gain access to confidential data and cause service failures.

The vulnerability of the net/wireless/nl80211.c component in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and also cause service failures...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Gstreamer multimedia framework, related to buffer overflows in the stack, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gstreamer multimedia framework is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of open-source development environments for UEFI EDK2, related to configuration errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of open-source development environments for UEFI EDK2 is related to configuration errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the C/C++ Libstb library relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

The vulnerability of the QEMU hardware emulation software’s “info” command, related to uncontrolled resource consumption, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU hardware emulation software’s “info” command is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to access confidential data, compromise its integrity, and even cause service failures through the use of a specially...

The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser relates to an improper limitation on the visible layers of the user interface. This allows a malicious actor to gain access to confidential data.

The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in implementations of ASN.1/DER, PKIX, Kerberos Heimdal, and the Samba network communication software package, related to repeated memory release, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerabilities of ASN.1/DER, PKIX, Kerberos Heimdal, and the Samba networking software package are related to repeated memory release. Exploiting these vulnerabilities can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...