CVE-2024-40847

The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive user data...

CVE-2024-44131

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data...

CVE-2024-44131

CVE-2024-44131 concerns Apple’s FileProvider symlink handling. The issue arises from improper validation of symlinks, enabling a malicious app running with elevated file operation privileges to access or exfiltrate data via symlink manipulation. Apple states fixes are in iOS 18, iPadOS 18, and ma...

CVE-2024-44131

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data...

About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in the lack of mechanisms for generating error reports. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities can allow attackers operating remotely to...

PT-2024-29111 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13.7.1 macOS versions prior to Sonoma 14.7.1 macOS versions prior to Sequoia 15 Description: A sandboxed application may be able to access sensitive user data due to insufficient checks. Recommendations: Update...

PT-2024-29114 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolv...

PT-2024-31056 · Apple · Xcode +1

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16 Description: The issue allows an app to potentially inherit Xcode permissions, enabling access to user data due to inadequate permissions checking. Recommendations: For versions prior to 16, update to Xcode 16 to...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to information leaks through process environments, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to information leaks through the process environment. Exploiting these vulnerabilities can allow attackers operating remotely ...

macOS 14.x < 14.7 Multiple Vulnerabilities (121247)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18,...

About the security content of macOS Sequoia 15

About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

The vulnerability in the collection of libraries and drivers for fast packet processing in dpdk, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the library and driver set for fast packet processing in dpdk is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

Vulnerabilities fixed in Ivanti Endpoint Manager

Ivanti has fixed vulnerabilities in Ivanti Endpoint Manager. Vulnerabilities have been fixed in Ivanti Endpoint Manager. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Remote code execution Administrator/Root privileges...

The vulnerability of the Gstreamer multimedia framework, related to buffer overflows in the stack, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gstreamer multimedia framework is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of open-source development environments for UEFI EDK2, related to configuration errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of open-source development environments for UEFI EDK2 is related to configuration errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the Firefox web browser, related to insufficient registration checks, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to insufficient verification of registrations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the net/wireless/nl80211.c component in the Linux operating system, related to improper energy consumption restrictions, allows attackers to gain access to confidential data and cause service failures.

The vulnerability of the net/wireless/nl80211.c component in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and also cause service failures...

The vulnerability of the QEMU hardware emulation software’s “info” command, related to uncontrolled resource consumption, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU hardware emulation software’s “info” command is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to access confidential data, compromise its integrity, and even cause service failures through the use of a specially...

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...