49 matches found
CVE-2018-4296: Undefined Security Weakness
This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks...
Apple macOS Catalina DiskArbitration Component Buffer Overflow Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.DiskArbitration is a disk loading and unloading component of it. A buffer overflow vulnerability exists in the DiskArbitration component in Apple macOS Catalina versions prior to 10.15.5. An attacker could...
macOS 10.13.6 Multiple Vulnerabilities (Security Update 2019-002)
The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including: - An application may be able to execute arbitrary code with kernel privileges. CVE-2019-8529 - A local user may be able to read kernel memory. CVE-2019-8504 ...
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-002)
The remote host is running Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including: - A malicious application may be able to execute arbitrary code with kernel privileges. CVE-2019-8555 - A malicious application may be able to determine...
Mac OS X DiskArbitration Code Execution
The vulnerability of the DiskArbitration component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code in privileged context racing condition through a...
About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Apple macOS Sierra DiskArbitration Competitive Conditional Elevation of Privilege Vulnerability
Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A competitive conditional elevation of privilege vulnerability exists in Apple macOS DiskArbitration, which can be exploited by remote attackers to build malicious applications with elevated privileges...
CVE-2017-2533
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...
Race condition
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2017-2533
CVE-2017-2533 is a real, concrete vulnerability affecting macOS DiskArbitration. The issue is a race condition in DiskArbitration that can allow a crafted app running with local access to execute arbitrary code in a privileged context, effectively a local privilege escalation. Affected systems in...
CVE-2017-2533
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2017-2533: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...
PT-2017-2184
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description The issue is related to the DiskArbitration component and involves a race condition that allows attackers to execute arbitrary code in a privileged context. This can be achieved via a specially craft...
Mac OS X Multiple Vulnerabilities (Security Update 2017-002)
The remote host is running a version of Mac OS X 10.10.5 or 10.11.6 that is missing a security update. It is therefore, affected by multiple vulnerabilities : - A memory corruption issue exists in the Sandbox component that allows an unauthenticated, remote attacker to escape an application...
macOS 10.12.x < 10.12.5 Multiple Vulnerabilities
The remote host is running a version of macOS that is 10.12.x prior to 10.12.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the Kernel component that allow a local attacker to gain kernel-level privileges. CVE-2017-2494, CVE-2017-2546 - A...
Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities
Binary data 700119.prm...
About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite
About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite This document describes the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite. About Apple security...
Apple OS X DiskArbitration Arbitrary Code Execution Vulnerability
Apple OS X is a suite of operating systems developed by Apple for Mac computers.Address Book is an address book or contact framework.DiskArbitration is a component that handles disk mounting.... An arbitrary code execution vulnerability exists in diskutil in DiskArbitration in Apple OS X versions...