Crash Reporter File Modification

The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify arbitrary files...

Identity Service Bypass Security Restrictions

The vulnerability of the Identity Service for operating systems tvOS, iOS, iPadOS, and watchOS is related to incorrect code generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

Microsoft Edge iOS Authentication Bypass Spoofing

The vulnerability of Microsoft Edge browser on the iOS operating system is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...

Preferences Component Privilege Escalation

The vulnerability of the Preferences component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in path name checking for restricted access directories. Exploiting this vulnerability can allow attackers to gain increased privileges...

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and Apple’s Security Engineering and Architecture SEAR group for collaborating with us on the technical analysis. The editorial opinions reflected below ar...

NSO Group spyware found on iPhones of US State Department employees

iPhones of at least nine US State Department employees are said to have been hacked using the Pegasus spyware developed by the Israeli technology company, NSO Group. Pegasus is a proprietary and sophisticated spyware capable of the remote surveillance of smartphones. The employees targeted by an...

FaceTime Video Audio Unauthorized Access

The vulnerability of FaceTime video/audio calls in macOS and iOS operating systems lies in the fact that the call operations go beyond the buffer in memory during group calls. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

WebKitGTK Memory Use After Free

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS operating systems is related to the use of memory after it is freed during the processing of malicious web content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-43220

Microsoft Edge for iOS Spoofing Vulnerability...

Apple Security Update: iOS 15.1.1

Apple recommends to install security update iOS 15.1.1 on devices iPhone 12 and later...

iOS tvOS watchOS Logical Bypass

The vulnerability of iOS, tvOS, and watchOS operating systems is related to a logical error during the authentication process. Exploiting this vulnerability can allow an attacker to bypass authenticity checks...

CVE-2021-43187

In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...

CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

JetBrains YouTrack security vulnerabilities

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...

CVE-2021-30831

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

The iPhone of New York Times journalist Ben Hubbard was repeatedly hacked with NSO Group's Pegasus spyware tool over a three-year period stretching between June 2018 to June 2021, resulting in infections twice in July 2020 and June 2021. The University of Toronto's Citizen Lab, which publicized t...

Nong Ge File Explorer Authorization Issue Vulnerability

Nong Ge File Explorer is a privacy application by Nong Ge Personal Developer for organizing and viewing all files on your Iphone or Ipad. A security vulnerability exists in Nong Ge File Explorer that stems from an issue with the authentication mechanism that allows access to sensitive data withou...

iOS Privilege Escalation

The vulnerability of the iOS operating system and the iPadOS operating system is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to increase their privileges...

iPadOS tvOS iOS Safari Integer Overflow Code Execution

The vulnerability of operating systems such as iPadOS, tvOS, iOS, and the Safari browser is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

iPadOS iOS Mac OS Memory Use After Free

The vulnerability of operating systems iPadOS, iOS, and Mac OS is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...