Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which is caused by an obscure password in a screenshot. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad...

Apple Shortcuts 安全漏洞

Apple Shortcuts for iOS is a suite of shortcut applications from Apple Inc. for the iOS platform. A security vulnerability exists in Apple Shortcuts, which originated when the application could allow Shortcuts to access restricted files. The following products and versions are affected: iPhone 6s...

Apple iOS 安全漏洞

Apple iOS is a set of operating systems developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS that allows local users to view sensitive information in the application switcher. The following products and versions are affected: iPhone 6s and later, iPad Pro all...

Apple iOS 资源管理错误漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which could allow an attacker executing JavaScript to execute arbitrary code. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which stems from the ability of traditional cellular networks to automatically answer incoming calls when a call ends or is disconnected. The following products and versions...

Apple iOS 信任管理问题漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS where an attacker in a privileged network location may be able to alter network traffic. The following products and versions are affected: iPhone 6s and later, iPad Pro all...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, where a malicious application may be able to determine the kernel memory layout. The following products and versions are affected: iPhone 6s and later, iPad Pro all models,...

Apple Safari 输入验证错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari, which can be exploited by local users to write arbitrary files. The following products and versions are affected: iPhon...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple Inc. in the United States. A security vulnerability exists in Apple Kernel, which can be exploited by malicious applications to execute arbitrary code using kernel privileges. The following products and versions are affected: iPhone 6s a...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple Inc. in the United States. A security vulnerability exists in the Apple Kernel that stems from an out-of-bounds read issue. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later,...

CVE-2021-21205

Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2021-30496

The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service application crash if the victim pastes an attacker-supplied message e.g., in the Persian language into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that...

Details on the Unlocking of the San Bernardino Terrorist’s iPhone

The Washington Post has published a long story on the unlocking of the San Bernardino Terrorists iPhone 5C in 2016. We all thought it was an Israeli company called Cellebrite. It was actually an Australian company called Azimuth Security. Azimuth specialized in finding significant vulnerabilities...

How the FBI Got Into the San Bernardino Shooter’s iPhone

Plus: Russian sanctions, Europe’s SolarWinds fallout, and more of this week’s top security news...

PT-2021-7334 · Apple +9 · Ipados +13

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.0.1 iOS versions prior to 15.1 iPadOS versions prior to 15.1 watchOS versions prior to 8.1 tvOS versions prior to 15.1 Description: A logic issue was addressed with improved restrictions. Processing...

CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write...

A week in security (March 29 – April 4)

Last week on Malwarebytes Labs, our podcast featured Malwarebytes senior security researcher JP Taggart, who talked to us about why you need to trust your VPN. You’ve likely heard the benefits of using a VPN: You can watch TV shows restricted to certain countries, you can encrypt your web traffic...

CVE-2021-1796

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-1759

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...