About the security content of tvOS 9.2.1

About the security content of tvOS 9.2.1 This document describes the security content of tvOS 9.2.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003

About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003 This document describes the security content of OS X El Capitan v10.11.5 and Security Update 2016-003. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full...

(Pwn2Own) Microsoft Windows win32kfull.sys Surface Object Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how...

Apple OS X AppleRAID Component Memory Corruption Vulnerability

Apple OS X is a special operating system developed by Apple for Mac computers, of which AppleRAID is a disk array utility component. A security vulnerability exists in the AppleRAID component of Apple OS X versions prior to 10.11.4. An attacker could exploit this vulnerability to execute arbitrar...

Apple OS X Intel Graphics Driver Memory Corruption Vulnerability (CNVD-2016-01879)

Apple OS X is a specialized operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the graphics card driver components. A security vulnerability exists in Intel Graphics Driver in Apple OS X versions prior to 10.11.4. The vulnerability can be exploited by an attacke...

Apple OS X Bluetooth Component Memory Corruption Vulnerability (CNVD-2016-01871)

Apple OS X is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A security vulnerability exists in the Bluetooth component of Apple OS X versions prior to 10.11.4. The vulnerability can be exploited by an attacker with a specially...

Apple OS X NVIDIA Graphics Drivers Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.NVIDIA Graphics Drivers is one of the graphics driver components. A security vulnerability exists in NVIDIA Graphics Drivers in Apple OS X versions prior to 10.11.4. The vulnerability can be exploited by an attacker...

Apple iOS Kernel Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A memory corruption vulnerability exists in the Kernel implementation in versions prior to iOS 9.3, which can lead to the execution of arbitrary code with kernel...

Apple iOS AppleUSBNetworking Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in the implementation of AppleUSBNetworking in versions prior to iOS 9.3, due to a failure to authenticate data from USB devices...

About the security content of watchOS 2.2

About the security content of watchOS 2.2 This document describes the security content of watchOS 2.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

About the security content of tvOS 9.1.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of OS X El Capitan 10.11.3 and Security Update 2016-001 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Apple OS X Memory Corruption Vulnerability (CNVD-2015-08162)

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a memory corruption vulnerability that allows attackers to exploit the vulnerability to execute arbitrary code with kernel privileges...

Apple OS X Kernel Extended Load Verification Bypass Vulnerability

Apple OS X is an operating system developed by Apple Inc. An authentication bypass vulnerability exists in Apple OS X kernel extension loading, which allows attackers to exploit the vulnerability to execute arbitrary code with kernel privileges...

Apple OS X Memory Corruption Vulnerability (CNVD-2015-08163)

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a memory corruption vulnerability that allows attackers to exploit the vulnerability to execute arbitrary code with kernel privileges...

Apple OS X mach message handling arbitrary code execution vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a security vulnerability in the handling of mach messages, which allows an attacker to exploit the vulnerability to execute arbitrary code with kernel privileges...

Fortinet FortiClient Arbitrary Code Execution Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end-users with antivirus, encryption, and other services. An arbitrary code vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows local users to execute arbitrary code with kernel privileges b...

CVE-2015-5736

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

Code injection

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

CVE-2015-5736

Fortinet FortiClient (Windows) before 5.2.4 is affected by CVE-2015-5736 via the Fortishield.sys minifilter. The IOCTL calls 0x220024 and 0x220028 allow a non-user-supplied callback to be set, enabling a local user to execute code with kernel privileges through the registered callback during IRP_...