Lucene search
+L

1297 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/03/18 12:00 a.m.17 views

Apple macOS ImageIO Pixel Conversion Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS5.9AI score0.00315EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2021-23792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity XXE Injection due to an insecurely initialized XML...

9.8CVSS7AI score0.0105EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:00 a.m.12 views

The vulnerability of the ImageIO component in operating systems such as MacOs, tvOs, watchOs, iPadOs, iOS, and visionOs allows attackers to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as MacOs, tvOS, watchOS, iPadOS, iOS, and visionOS relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS6.9AI score0.00618EPSS
SaveExploits0References6Affected Software6
Apple
Apple
added 2024/12/11 12:00 a.m.150 views

About the security content of iPadOS17.7.3

About the security content of iPadOS17.7.3 This document describes the security content of iPadOS 17.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

9.8CVSS7.5AI score0.01686EPSS
SaveExploits0References1Affected Software1
Apple
Apple
added 2024/12/11 12:00 a.m.179 views

About the security content of watchOS11.2

About the security content of watchOS11.2 This document describes the security content of watchOS 11.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS7.1AI score0.0324EPSS
SaveExploits0References1Affected Software1
Apple
Apple
added 2024/12/11 12:00 a.m.131 views

About the security content of visionOS2.2

About the security content of visionOS2.2 This document describes the security content of visionOS 2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS7AI score0.14964EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/11/29 11:07 a.m.20 views

OESA-2024-2488 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows...

8.8CVSS7.2AI score0.05166EPSS
SaveExploits0References44
OSV
OSV
added 2024/11/29 11:07 a.m.9 views

OESA-2024-2487 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows...

8.8CVSS7.2AI score0.05166EPSS
SaveExploits0References42
OSV
OSV
added 2024/11/29 11:07 a.m.21 views

OESA-2024-2489 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows...

8.8CVSS7.2AI score0.05166EPSS
SaveExploits0References44
OSV
OSV
added 2024/11/29 11:07 a.m.8 views

OESA-2024-2486 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows...

8.8CVSS7.2AI score0.05166EPSS
SaveExploits0References44
OSV
OSV
added 2024/11/29 11:07 a.m.12 views

OESA-2024-2485 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows...

8.8CVSS7.2AI score0.05166EPSS
SaveExploits0References44
Zero Day Initiative
Zero Day Initiative
added 2024/10/31 12:00 a.m.19 views

Apple macOS ImageIO JP2 Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS5.9AI score0.00327EPSS
SaveExploits0References1
Apple
Apple
added 2024/10/28 12:00 a.m.238 views

About the security content of iOS 18.1 and iPadOS 18.1

About the security content of iOS 18.1 and iPadOS 18.1 This document describes the security content of iOS 18.1 and iPadOS 18.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

9.8CVSS8.1AI score0.00836EPSS
SaveExploits1References1Affected Software2
Apple
Apple
added 2024/10/28 12:00 a.m.45 views

About the security content of visionOS2.1

About the security content of visionOS2.1 This document describes the security content of visionOS 2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS6.7AI score0.00998EPSS
SaveExploits3References1Affected Software1
Apple
Apple
added 2024/10/28 12:00 a.m.79 views

About the security content of iOS 17.7.1 and iPadOS 17.7.1

About the security content of iOS 17.7.1 and iPadOS 17.7.1 This document describes the security content of iOS 17.7.1 and iPadOS 17.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

8.8CVSS7AI score0.00998EPSS
SaveExploits3References1Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2024/10/02 12:00 a.m.9 views

Apple macOS ImageIO PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS7.1AI score0.07697EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/02 12:00 a.m.18 views

Apple macOS ImageIO KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

3.3CVSS5.8AI score0.0029EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/25 12:00 a.m.13 views

Apple macOS ImageIO JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS6.9AI score0.07939EPSS
SaveExploits0References1
Apple
Apple
added 2024/09/16 12:00 a.m.135 views

About the security content of watchOS11

About the security content of watchOS11 This document describes the security content of watchOS 11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.1CVSS6.6AI score0.07939EPSS
SaveExploits0References1Affected Software1
Apple
Apple
added 2024/09/16 12:00 a.m.67 views

About the security content of iOS 17.7 and iPadOS 17.7

About the security content of iOS 17.7 and iPadOS 17.7 This document describes the security content of iOS 17.7 and iPadOS 17.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

8.1CVSS5.9AI score0.07939EPSS
SaveExploits1References1Affected Software2
Rows per page
Query Builder