About the security content of macOS Big Sur 11.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple Tcc Authorization Issues Vulnerabilities

Apple Tcc is a database used by Apple Inc. in the United States to store privacy and security-related settings in System Preferences. Apple Tcc is vulnerable to an authorization issue and the following products and versions are affected: iMac 2014 and later, MacBook 2015 and later, iMac Pro all...

Apple macOS Resource Management Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that can be exploited by local attackers to escalate their privileges. The following products and versions are affected: Mac Pro 2013 and newer, MacBook Air 2013...

Apple FontParser Buffer Error Vulnerability

Apple FontParser is a font parsing program from Apple. A buffer error vulnerability exists in Apple FontParser. The vulnerability stems from the fact that processing a maliciously crafted font file could result in arbitrary code execution and affects the following products and versions: Mac Pro...

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOs. Processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected: Mac Pro 2013 and newer models...

Apple Security Update: macOS Catalina 10.15 Supplemental Update

Apple recommends to install security update macOS Catalina 10.15 Supplemental Update on devices MacBook Early 2015 and later, MacBook Air Mid 2012 and later, MacBook Pro Mid 2012 and later, Mac mini Late 2012 and later, iMac Late 2012 and later, iMac Pro all models, and Mac Pro Late 2013 and late...

Apple Security Update: macOS Catalina 10.15 Supplemental Update

Apple recommends to install security update macOS Catalina 10.15 Supplemental Update on devices MacBook Early 2015 and later, MacBook Air Mid 2012 and later, MacBook Pro Mid 2012 and later, Mac mini Late 2012 and later, iMac Late 2012 and later, iMac Pro all models, and Mac Pro Late 2013 and late...

Apple macOS Multiple Security Vulnerabilities

Description Apple macOS is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, bypass security restrictions or obtain sensitive information. Technologies Affected Apple IMac Apple Mac Pro Apple MacBook Apple MacMini Apple Macbook Air Apple...

PHP CVE-2019-11042 Heap Buffer Overflow Vulnerability

Description PHP is prone to a heap-based buffer-overflow vulnerability. Successfully exploiting this issue allow attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. PHP versions prior to 7.3.8 are vulnerable...

About the security content of Wi-Fi Update for Boot Camp 6.4.0

About the security content of Wi-Fi Update for Boot Camp 6.4.0 This document describes the security content of Wi-Fi Update for Boot Camp 6.4.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

Thunderstrike — Infecting Apple MacBooks with EFI Bootkit via Thunderbolt Ports

A security researcher has discovered an easy way to infect Apple’s Macintosh computers with an unusual kind of malware using its own Thunderbolt port. The hack was presented by programming expert Trammell Hudson at the annual Chaos Computer Congress 30C3 in Hamburg Germany. He demonstrated that i...