Lucene search
K

289 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.1 views

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows attackers to disclose protected information.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

6.5CVSS0.00244EPSS
Exploits0References6Affected Software5
Apple
Apple
added 2021/12/13 12:0 a.m.41 views

About the security content of tvOS 15.2

About the security content of tvOS 15.2 This document describes the security content of tvOS 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS8.6AI score0.36267EPSS
Exploits7References1Affected Software1
Apple
Apple
added 2021/12/13 12:0 a.m.39 views

About the security content of watchOS 8.3

About the security content of watchOS 8.3 This document describes the security content of watchOS 8.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS8.6AI score0.36267EPSS
Exploits7References1Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.33 views

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front...

7.8CVSS8AI score0.43948EPSS
In wildExploits0
Apple
Apple
added 2021/09/20 12:0 a.m.45 views

About the security content of watchOS 8

About the security content of watchOS 8 This document describes the security content of watchOS 8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.3AI score0.00769EPSS
Exploits1References1Affected Software1
Apple
Apple
added 2021/09/20 12:0 a.m.44 views

About the security content of tvOS 15

About the security content of tvOS 15 This document describes the security content of tvOS 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

9.3CVSS9.1AI score0.00769EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.1 views

Apple TV app 缓冲区错误漏洞

The Apple TV app is a television application from Apple USA. A buffer error vulnerability exists in Apple TV 4K and Apple TV HD, which stems from a boundary error when processing font files in FontParser. An attacker could use this vulnerability to trick a victim into opening a specially crafted...

7.8CVSS7.9AI score0.0027EPSS
Exploits0References17
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.1 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A buffer error vulnerability exists in Apple TV 4K and Apple TV HD, which stems from a boundary error when processing font files in FontParser. The vulnerability can be exploited to trick a victim into opening a specially crafted...

7.8CVSS7.9AI score0.0027EPSS
Exploits0References17
Apple
Apple
added 2021/05/24 12:0 a.m.41 views

About the security content of Security Update 2021-003 Catalina

About the security content of Security Update 2021-003 Catalina This document describes the security content of Security Update 2021-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

9.8CVSS9.2AI score0.7152EPSS
Exploits1References1Affected Software1
Apple
Apple
added 2021/05/24 12:0 a.m.108 views

About the security content of watchOS 7.5

About the security content of watchOS 7.5 This document describes the security content of watchOS 7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.6AI score0.01256EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.0 views

Apple macOS 竞争条件问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a competitive condition that originates in the FontParser component when processing font files. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6 18G84, 10.14.6...

7.8CVSS7.3AI score0.00348EPSS
Exploits0References7
Apple
Apple
added 2021/04/26 12:0 a.m.80 views

About the security content of watchOS 7.4

About the security content of watchOS 7.4 This document describes the security content of watchOS 7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.7AI score0.02359EPSS
Exploits0References1Affected Software1
Apple
Apple
added 2021/04/26 12:0 a.m.123 views

About the security content of Security Update 2021-002 Catalina

About the security content of Security Update 2021-002 Catalina This document describes the security content of Security Update 2021-002 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

10CVSS9.7AI score0.83081EPSS
Exploits9References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/02/12 12:0 a.m.52 views

Apple TV < 14.3 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as described in the HT212005 advisory: - An out-of-bounds write issue within CoreAudio processing may allow a maliciously crafted audio file to cause...

8.8CVSS8.2AI score0.03155EPSS
Exploits0References11
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.3 views

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from insufficient validation of user-supplied input when processing font files in the FontParser component of macOS. A remote attacker could trick a...

7.8CVSS7.2AI score0.00377EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.5 views

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a boundary condition when processing font files within the FontParser component in macOS. A remote attacker can create specially crafted files or...

7.8CVSS7.1AI score0.00548EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.3 views

Apple FontParser Buffer Error Vulnerability

Apple FontParser is a font parsing program from Apple Inc. A security vulnerability exists in Apple FontParser that could allow a remote attacker to access potentially sensitive information. The following products and versions are affected: macOS: 10.14, 10.14.1, 10.14.2, 10.14.3, 10.14.4, 10.14....

5.5CVSS6.8AI score0.00698EPSS
Exploits0References9
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.6 views

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a boundary condition when processing font files within the FontParser component in macOS. A remote attacker can create specially crafted files or...

7.8CVSS7.1AI score0.00306EPSS
Exploits0References4
Apple
Apple
added 2020/12/22 5:59 a.m.65 views

About the security content of watchOS 7.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

8.8CVSS0.6AI score0.03155EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2020/12/16 12:0 a.m.2 views

Apple macOS buffer overflow vulnerability (CNVD-2021-00023)

Apple macOS is a specialized operating system developed by Apple for Mac computers. A buffer overflow vulnerability exists in Apple macOS. The vulnerability originates from an unknown function in FontParser. An attacker can exploit the vulnerability to cause arbitrary code execution...

7.8CVSS7.9AI score0.00491EPSS
Exploits0References1
Rows per page
Query Builder