CVE-2024-44178

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system...

CVE-2024-40843

CVE-2024-40843 affects macOS Sequoia 15. The issue involves an app potentially modifying protected parts of the file system. Root cause: insufficient checks that allowed modification of protected filesystem areas. Impact: local privilege/unauthorized access risk in macOS 15 environments. Remediat...

CVE-2024-40843

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to modify protected parts of the file system...

CVE-2024-40843

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to modify protected parts of the file system...

CVE-2024-40860

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to modify protected parts of the file system...

CVE-2024-40860

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to modify protected parts of the file system...

CVE-2024-40860

CVE-2024-40860 describes a logic issue in macOS that could allow an app to modify protected parts of the filesystem. The vulnerability is addressed in macOS Sonoma 14.7 and macOS Sequoia 15. The connected documents confirm a fix is available in those releases; no exploit details or active weaponi...

CVE-2024-44151

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system...

CVE-2024-44151

CVE-2024-44151 is a macOS-specific permissions issue: an app may be able to modify protected parts of the file system. Public details indicate the vulnerability is addressed with additional restrictions and fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The Red Hat and vuln...

CVE-2024-44151

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system...

Path Traversal

org.springframework:spring-webmvc and org.springframework:spring-webflux are vulnerable to Path Traversal. The vulnerability is due to inadequate validation of file paths in HTTP requests, allowing access to files on the file system when using RouterFunctions with a FileSystemResource location...

About the security content of macOS Sonoma 14.7

About the security content of macOS Sonoma 14.7 This document describes the security content of macOS Sonoma 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

Ubuntu: Security Advisory (USN-7003-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-31003 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 Description: A library injection issue was addressed with additional restrictions. This issue allows an app to potentially modify protected...

PT-2024-29116 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7 macOS versions prior to 15 Description: A logic issue was addressed with improved checks, allowing an app to potentially modify protected parts of the file system. Recommendations: For macOS versions prior to 14.7...

PT-2024-29100 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app to modify protected parts of the file system. It was addressed with improved checks. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolve the issue...

SUSE CVE-2024-46682

In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4showopen Prior to commit 3f29cc82a84c "nfsd: split scstatus out of sctype" statesshow relied on sctype field to be of valid type before calling into a subfunction to show conten...

SUSE CVE-2024-46695

In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inodesetsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashin...

USN-7009-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Chenyuan Yang discovered that the USB Gadget subsystem in...