3266 matches found
CVE-2024-40850
A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to access user-sensitive data...
CVE-2024-27869
The CVE-2024-27869 issue affects Apple platforms and is described as a vulnerability where an app may be able to record the screen without an indicator. The connected sources indicate the root cause is addressed by improved checks, with fixes implemented in iOS 18, iPadOS 18, and macOS Sequoia 15...
CVE-2024-44147
CVE-2024-44147 affects iOS 18 and iPadOS 18. The issue, resolved by Apple through improved state management, could allow an app to gain unauthorized access to the Local Network via the NetworkExtension surface. The vulnerability is fixed in iOS 18/iPadOS 18; no exploitation details are provided b...
CVE-2024-44189
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent...
PT-2024-30984 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app to potentially break out of its sandbox due to inadequate validation of file attributes. This has been addressed with improved validation. Recommendations: For versions prior to...
PT-2024-30999 · Apple · Macos Sonoma +5
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.7 iPadOS versions prior to 17.7 macOS Ventura versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 Description: The issue allows an app to bypass Privacy preferences. This was...
PT-2024-29100 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app to modify protected parts of the file system. It was addressed with improved checks. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolve the issue...
PT-2024-29081 · Apple · Visionos +2
Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2 macOS Sequoia versions prior to 15 Description: A malicious app with root privileges may be able to modify the contents of system files due to inadequate checks. The issue was addressed with improved checks...
PT-2024-30983 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18 iPadOS versions prior to 18 Description: This issue allows an app to gain unauthorized access to the Local Network. The problem was addressed through improved state management. Recommendations: For iOS versions prior ...
About the security content of macOS Sequoia 15
About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
RHSA-2010:0547 Red Hat Security Advisory: firefox security update
Bulletin has no description...
[SECURITY] Fedora 39 Update: vim-9.1.719-1.fc39
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
java-11-openjdk security update
1:11.0.23.0.9-2.0.3 - Fixes below CVE's - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes malformed control flow openjdk bug8303466 - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144 Enhance-Pack-200-loading - CVE-2024-21145 Improve-2D-image-handli...
Cisco ASA Authentication Bypass (EXTRABACON)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA Authentication Bypass EXTRABACON', 'Description' = %q This module patches the authentication functions of a Cisco ASA to allow...
SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2024:2949-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2949-1 advisory. - CVE-2024-40776: Fixed a use-after-free issue with improved memory management bsc1228613. - CVE-2024-40779: Fixed a out-of-bounds...
Fedora: Security Advisory (FEDORA-2024-5e87ad4678)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-fe5420ed3f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-40827
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to overwrite arbitrary files...
CVE-2024-40835
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the us...