About the security content of iOS 14.7 and iPadOS 14.7

About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2021-18849 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 14.7 Apple macOS versions prior to Big Sur 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple macOS Mojave versions prior to Security Update 2021-005 Apple macOS Catalina versions prio...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to trigger an integer overflow and execute arbitrary code on the target system via a specially crafte...

Apple macOS Big Sur 信息泄露漏洞

Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...

Apple macOS 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in macOS, which can be exploited by a remote attacker to create a specially crafted font file, trick a victim into opening it, trigger a stack-based buffer overflow, and execut...

UBUNTU-CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62471)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Font Driver Host in...

About the security content of iOS 14.7 and iPadOS 14.7

About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability...

Remote code execution

Windows Font Driver Host Remote Code Execution Vulnerability...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability...

CVE-2021-34438 Windows Font Driver Host Remote Code Execution Vulnerability

...

CVE-2021-34438

CVE-2021-34438 is a Windows Font Driver Host remote code execution vulnerability in Microsoft Windows/Windows Server. The CVE entry describes a remote code execution flaw in the Font Driver Host component that can be triggered locally or remotely depending on context, with high/severe impact as r...

CVE-2021-34438 Windows Font Driver Host Remote Code Execution Vulnerability

...

Windows Font Driver Host Remote Code Execution Vulnerability

...

PT-2021-5264 · Microsoft · Windows Font Driver Host +1

Name of the Vulnerable Software and Affected Versions: Windows Font Driver Host affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Font Driver. It allows remote attackers to execute arbitrary code, affecting the system...

Microsoft Graphics Component 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Font Driver Host in...

Denial Of Service (DoS)

freetype is vulnerable to denial of service. A NULL pointer dereference in the InsGETVARIATION function in ttinterp.c allows an attacker to crash the application via a malicious font file...