EUVD-2022-49499

Malicious code in bioql PyPI...

Messages Component Zero-Click Attack

The vulnerability of the Messages component in operating systems such as watchOS, macOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to carry out a zero-click attack using a specially crafted iCloud link...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

About the security content of macOS Sonoma 14.7.4

About the security content of macOS Sonoma 14.7.4 This document describes the security content of macOS Sonoma 14.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

Code injection

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

CVE-2022-46710: Improper Enforcement of Behavioral Workflow

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

macOS 13.x < 13.1 Multiple Vulnerabilities (HT213532)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.1. It is, therefore, affected by multiple vulnerabilities: - Nokogiri is an open source XML and HTML library for Ruby. Nokogiri = 1.13.4. There are no known workarounds for this issue. CVE-2022-24836 - Nokogiri is a...

PT-2020-11333

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.3 iPadOS versions prior to 13.3 Description The issue allows Live Photo audio and video data to be shared via iCloud links even if Live Photo is disabled in the Share Sheet carousel. This is due to inadequate validatio...