Lucene search
+L

329 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/02/16 12:00 a.m.•138 views

Apple macOS libFontParser TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the libFontParser library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

7.8CVSS5AI score0.01347EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•15 views

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows attackers to disclose protected information.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

6.5CVSS6AI score0.00852EPSS
SaveExploits0References6Affected Software5
Apple
Apple
•added 2021/12/13 12:00 a.m.•172 views

About the security content of watchOS 8.3

About the security content of watchOS 8.3 This document describes the security content of watchOS 8.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS8.6AI score0.17294EPSS
SaveExploits7References1Affected Software1
Apple
Apple
•added 2021/12/13 12:00 a.m.•172 views

About the security content of tvOS 15.2

About the security content of tvOS 15.2 This document describes the security content of tvOS 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS8.6AI score0.17294EPSS
SaveExploits7References1Affected Software1
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•52 views

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front...

7.8CVSS8AI score0.22009EPSS
SaveIn wildExploits0
Apple
Apple
•added 2021/09/20 12:00 a.m.•197 views

About the security content of watchOS 8

About the security content of watchOS 8 This document describes the security content of watchOS 8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.3AI score0.19433EPSS
SaveExploits1References1Affected Software1
Apple
Apple
•added 2021/09/20 12:00 a.m.•203 views

About the security content of tvOS 15

About the security content of tvOS 15 This document describes the security content of tvOS 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

9.3CVSS9.1AI score0.19433EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•7 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A buffer error vulnerability exists in Apple TV 4K and Apple TV HD, which stems from a boundary error when processing font files in FontParser. The vulnerability can be exploited to trick a victim into opening a specially crafted...

7.8CVSS7.9AI score0.01331EPSS
SaveExploits0References17
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•7 views

Apple TV app 缓冲区错误漏洞

The Apple TV app is a television application from Apple USA. A buffer error vulnerability exists in Apple TV 4K and Apple TV HD, which stems from a boundary error when processing font files in FontParser. An attacker could use this vulnerability to trick a victim into opening a specially crafted...

7.8CVSS7.9AI score0.01331EPSS
SaveExploits0References17
Apple
Apple
•added 2021/05/24 12:00 a.m.•209 views

About the security content of watchOS 7.5

About the security content of watchOS 7.5 This document describes the security content of watchOS 7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.6AI score0.02924EPSS
SaveExploits2References1Affected Software1
Apple
Apple
•added 2021/05/24 12:00 a.m.•67 views

About the security content of Security Update 2021-003 Catalina

About the security content of Security Update 2021-003 Catalina This document describes the security content of Security Update 2021-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

9.8CVSS7.7AI score0.84994EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/04/27 12:00 a.m.•12 views

Apple macOS 竞争条件问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a competitive condition that originates in the FontParser component when processing font files. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6 18G84, 10.14.6...

7.8CVSS7.3AI score0.01284EPSS
SaveExploits0References7
Apple
Apple
•added 2021/04/26 12:00 a.m.•195 views

About the security content of watchOS 7.4

About the security content of watchOS 7.4 This document describes the security content of watchOS 7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.7AI score0.04491EPSS
SaveExploits0References1Affected Software1
Apple
Apple
•added 2021/04/26 12:00 a.m.•282 views

About the security content of Security Update 2021-002 Catalina

About the security content of Security Update 2021-002 Catalina This document describes the security content of Security Update 2021-002 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

10CVSS7.9AI score0.68531EPSS
SaveExploits9References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/02/12 12:00 a.m.•67 views

Apple TV < 14.3 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as described in the HT212005 advisory: - An out-of-bounds write issue within CoreAudio processing may allow a maliciously crafted audio file to cause...

8.8CVSS8.2AI score0.0174EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•22 views

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a boundary condition when processing font files within the FontParser component in macOS. A remote attacker can create specially crafted files or...

7.8CVSS7.1AI score0.01001EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•15 views

Apple FontParser Buffer Error Vulnerability

Apple FontParser is a font parsing program from Apple Inc. A security vulnerability exists in Apple FontParser that could allow a remote attacker to access potentially sensitive information. The following products and versions are affected: macOS: 10.14, 10.14.1, 10.14.2, 10.14.3, 10.14.4, 10.14....

5.5CVSS6.8AI score0.01027EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•17 views

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from insufficient validation of user-supplied input when processing font files in the FontParser component of macOS. A remote attacker could trick a...

7.8CVSS7.2AI score0.00891EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•18 views

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a boundary condition when processing font files within the FontParser component in macOS. A remote attacker can create specially crafted files or...

7.8CVSS7.1AI score0.00961EPSS
SaveExploits0References8
Apple
Apple
•added 2020/12/22 5:59 a.m.•80 views

About the security content of watchOS 7.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

8.8CVSS0.6AI score0.0174EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder