3422 matches found
CVE-2024-44274
CVE-2024-44274 is an Apple OS vulnerability affecting the Accessibility component that could allow an attacker with physical access to a locked device to view sensitive user information. The issue is mitigated by improved authentication and is fixed in: iOS 17.7.1, iPadOS 17.7.1, watchOS 11.1, iO...
CVE-2024-44215
CVE-2024-44215 affects Apple OS families. The issue arises when processing an image, which may disclose process memory. Affected products/versions include tvOS 18.1; iOS 18.1 and iOS 17.7.1 (iPadOS same); macOS Ventura 13.7.1 and macOS Sonoma 14.7.1; watchOS 11.1; and visionOS 2.1. The descriptio...
CVE-2024-44278
An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. A sandboxed app may be able to access sensitive...
CVE-2024-44297
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing a maliciously crafted message may lead to a denial-of-service...
CVE-2024-44296
CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...
CVE-2024-44255
A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent...
CVE-2024-44255
CVE-2024-44255 is a path handling issue addressed by Apple in versions listed as fixed: visionOS 2.1, iOS 18.1 / iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The issue allowed a malicious app to run arbitrary shortcuts without user consent due to improved p...
CVE-2024-44263
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data...
CVE-2024-44263
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data...
CVE-2024-44275
CVE-2024-44275 affects macOS and is fixed in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. The issue, described as an improvement in checks, could allow a malicious application with local access and user interaction to modify protected parts of the file system. The CVSS data indicates LOCAL attac...
webkitgtk: Memory corruption issue when processing web content
A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation...
CVE-2024-44141
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution...
DEBIAN-CVE-2024-44185
The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2024-40810
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause a coprocessor crash...
CVE-2024-44185
The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash...
New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics
Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by cybersecurity firm Halcyon under the moniker Qilin.B. "Notably, Qilin.B now supports AES-256-CTR encryption f...
AlmaLinux 9 : webkit2gtk3 (ALSA-2024:8180)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:8180 advisory. webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40776 webkitgtk: webkit2gtk: Processing maliciously crafted web content m...
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40776 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash...
podman security update
4.9.4-13.0.1 - Fixes issue of podman execvp error while using podmansh Orabug: 36073625 - Improved saving remote build context to tarfile in Podman daemon Orabug: 36495655 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put shou...