CVE-2020-10013

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...

Chromium 83 - Full CSP Bypass

Title: Chromium 83 - Full CSP Bypass Date: 02/09/2020 Exploit Author: Gal Weizman Vendor Homepage: https://www.chromium.org/ Software Link: https://download-chromium.appspot.com/ Version: 83 Tested On: Mac OS, Windows, iPhone, Android CVE: CVE-2020-6519 function var payload = top.SUCCESS = true;...

A ‘Magical Bug’ Exposed Any iPhone in a Hacker's Wi-Fi Range

A Google researcher found flaws in Apple's AWDL protocol that would have allowed for a complete device takeover...

Zero-Click exploit allowed attackers to hack any targeted iPhone

By Deeba Ahmed The iOS vulnerability allowed hackers to control your iPhone within radio proximity using AWDL. Here's its demo video. This is a post from HackRead.com Read the original post: Zero-Click exploit allowed attackers to hack any targeted iPhone...

Impressive iPhone Exploit

This is a scarily impressive vulnerability: Earlier this year, Apple patched one of the most breathtaking iPhone vulnerabilities ever: a memory corruption bug in the iOS kernel that gave attackers remote access to the entire device­ -- over Wi-Fi, with no user interaction required at all. Oh, and...

iPhone Bug Allowed for Complete Device Takeover Over the Air

Details tied to a stunning iPhone vulnerability were disclosed by noted Google Project Zero researcher Ian Beer. Apple patched the vulnerability earlier this year. But few details, until now, were known about the bug that could have allowed a threat actor to completely take over any iPhone within...

Apple Security Update: iOS 14.2.1

Apple recommends to install security update iOS 14.2.1 on devices iPhone 12 Pro, iPhone 12 Pro Max, iPhone 12, and iPhone 12 mini...

Unspecified Vulnerability in Multiple Apple Products (CNVD-2020-65928)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating...

Apple Security Update: iTunes 14.2.1

Apple recommends to install security update iTunes 14.2.1 on devices iPhone 12 Pro, iPhone 12 Pro Max, iPhone 12, and iPhone 12 mini...

Apple Security Update: iOS 14.2.1

Apple recommends to install security update iOS 14.2.1 on devices iPhone 12 Pro, iPhone 12 Pro Max, iPhone 12, and iPhone 12 mini...

Address bar spoofing in Opera Touch for iOS – Opera Security Advisories

Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

PT-2020-6111 · Apple · Icloud For Windows +8

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 iCloud for Windows versions prior to 11.5 tvOS versions prior to 14.2 iTunes for Windows versions prior to 12.11 Description...

PT-2020-16846 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.1 Security Update versions prior to 2020-001 Catalina Security Update versions prior to 2020-007 Mojave macOS Big Sur version 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 watchOS versions prior to...

PT-2020-11847 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: An issue existed within the path validation logic for symlinks, which was addressed...

PT-2020-16837 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.2 iPadOS versions prior to 14.2 macOS Big Sur versions prior to 11.0.1 watchOS versions prior to 7.1 tvOS versions prior to 14.2 Description: A use after free issue was addressed with improved memory management. This...

PT-2020-20923 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: The issue was addressed with improved deletion. A local user may be able to discover a user’s deleted messages...

PT-2020-20922 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: The issue allows a local user to potentially discover a user’s deleted messages due to inadequate deletion mechanisms. This has been addresse...

PT-2020-16857 · Apple · Macos Catalina +7

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.1 macOS Catalina versions prior to Security Update 2020-001 macOS Mojave versions prior to Security Update 2020-007 macOS Big Sur version 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 watch...

PT-2020-20846 · Apple · Macos Big Sur +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.2 iPadOS versions prior to 14.2 macOS Big Sur versions prior to 11.0.1 Description: An out-of-bounds write issue was addressed with improved input validation. Processing a maliciously crafted PDF may lead to arbitrary...

Windows 10, iOS, Chrome, Firefox and Others Hacked at Tianfu Cup Competition

Multiple software products from Adobe, Apple, Google, Microsoft, Mozilla, and Samsung were successfully pwned with previously unseen exploits in Tianfu Cup 2020, the third edition of the international cybersecurity contest held in the city of Chengdu, China. "Many mature and hard targets have bee...