376 matches found
Apple macOS Big Sur 安全漏洞
Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in multiple Apple products that allows malicious applications to execute arbitrary code using kernel privileges. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, security update...
SUSE SLES12 Security Update : kernel (Live Patch 13 for SLE 12 SP5) (SUSE-SU-2021:2453-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2453-1 advisory. This update for the Linux Kernel 4.12.14-12254 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possibl...
CVE-2021-34514
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2021-33771
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2021-31979 Windows Kernel Elevation of Privilege Vulnerability
...
MGASA-2021-0347 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.10.48 and fixes at least the following security issues: The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...
SUSE: Security Advisory (SUSE-SU-2014:0775-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows Kernel Elevation of Privilege Vulnerability
...
macOS 10.14.x < 10.14.6 Security Update 2021-004 Mojave (HT212531)
The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-004 Mojave. It is, therefore, affected by multiple vulnerabilities, including the following: - A remote attacker may be able to cause unexpected application termination or arbitrary code...
Apple tvOS 权限许可和访问控制问题漏洞
Apple tvOS is a smart TV operating system from Apple. The tvOS vulnerability is a permission and access control issue that arises from improper privilege management in the kernel subsystem of the operating system. A local attacker could use kernel privileges to execute arbitrary code on the syste...
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
Five high-severity security flaws in Dell’s firmware update driver are impacting potentially hundreds of millions of Dell desktops, laptops, notebooks and tablets, researchers said. The bugs have gone undisclosed for 12 years, and could allow the ability to bypass security products, execute code...
CVE-2021-23133
CVE-2021-23133 is a race condition in the Linux kernel SCTP sockets (net/sctp/socket.c) prior to 5.12-rc8. If sctp_destroy_sock executes without sock_net(sk)->sctp.addr_wq_lock, an element is removed from the auto_asconf_splist list without proper locking, enabling a local attacker with networ...
CVE-2020-27921
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...
New 'unc0ver' Tool Can Jailbreak All iPhone Models Running iOS 11.0 - 14.3
A popular jailbreaking tool called "unc0ver" has been updated to support iOS 14.3 and earlier releases, thereby making it possible to unlock almost every single iPhone model using a vulnerability that Apple in January disclosed was actively exploited in the wild. The latest release, dubbed unc0ve...
Intel Graphics Driver Competitive Conditions Issue Vulnerability
Intel Graphics Drivers is an integrated graphics driver from Intel Corporation. A competitive condition issue vulnerability exists in Intel Graphics Driver, which arises because an application may be able to execute arbitrary code using kernel privileges. The following products and models are...
Apple iOS < 12.4.9 Multiple Vulnerabilities
Binary data appleios1249check.nbin...
About the security content of iOS 13.6 and iPadOS 13.6 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c
An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...
November 2020 Patch Tuesday – 112 Vulnerabilities, 17 Critical, Windows Codecs, Network File System, Workstation, Adobe
This month’s Microsoft Patch Tuesday addresses 112 vulnerabilities with 17 of them labeled as Critical. The 17 Critical vulnerabilities cover Windows Codecs, Network File System, Sharepoint, Windows Print Spooler, and several other workstation vulnerabilities. Adobe released patches today for Ado...
Apple Patches Bugs Tied to Previously Identified Zero-Days
Apple has patched three previously identified zero-day vulnerabilities in its iPhone, iPod and iPad devices potentially related to a spate of related flaws recently discovered by the Google Project Zero team that also affect Google Chrome and Windows. Apple this week released iOS 14.2 and iPadOS...