117 matches found
About the security content of watchOS 10.3
About the security content of watchOS 10.3 This document describes the security content of watchOS 10.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...
About the security content of macOS Sonoma 14.3
About the security content of macOS Sonoma 14.3 This document describes the security content of macOS Sonoma 14.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...
About the security content of iOS 16.7.2 and iPadOS 16.7.2
About the security content of iOS 16.7.2 and iPadOS 16.7.2 This document describes the security content of iOS 16.7.2 and iPadOS 16.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
The vulnerability of the libxpc library in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to delete arbitrary files.
The vulnerability of the libxpc library in iPadOS, tvOS, iOS, watchOS, and macOS is related to permission handling errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files...
The vulnerability of the libxpc library in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to disclose protected information.
The vulnerability of the libxpc library in iPadOS, tvOS, iOS, watchOS, and macOS stems from the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...
About the security content of macOS Ventura 13.6
About the security content of macOS Ventura 13.6 This document describes the security content of macOS Ventura 13.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
About the security content of macOS Monterey 12.7
About the security content of macOS Monterey 12.7 This document describes the security content of macOS Monterey 12.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
PT-2023-5658 · Apple · Macos Monterey +8
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6 tvOS versions prior to 17 iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Monterey versions prior to 12.7 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17...
The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows attackers to elevate their privileges to the root level.
The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to the root level...
PT-2023-4191 · Apple · Libxpc +1
Name of the Vulnerable Software and Affected Versions: libxpc versions prior to macOS Monterey 12.6.8 libxpc versions prior to iOS 16.6 libxpc versions prior to iPadOS 16.6 libxpc versions prior to macOS Big Sur 11.7.9 libxpc versions prior to macOS Ventura 13.5 libxpc versions prior to watchOS 9...
PT-2023-4190 · Apple · Macos Monterey +7
Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.6.8 iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Big Sur versions prior to 11.7.9 macOS Ventura versions prior to 13.5 watchOS versions prior to 9.6 Description: A logic issue was addresse...
About the security content of tvOS 16.6
About the security content of tvOS 16.6 This document describes the security content of tvOS 16.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Microsoft gives Apple a migraine
On May 18, 2023, Apple published security content for macOS Ventura 13.4, macOS Monterey 12.6.6, and macOS Big Sur 11.7.7 that addressed a logic issue in libxpc. The Common Vulnerabilities and Exposures CVE database lists publicly disclosed computer security flaws. The CVE we are going to discuss...
The vulnerability of the libxpc library in MacOS operating systems allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the libxpc library in MacOS operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...
The vulnerability of the libxpc library in MacOS operating systems allows attackers to modify any part of the file system at will.
The vulnerability of the libxpc library in MacOS operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to modify arbitrary parts of the file system...
PT-2023-2894 · Apple · Macos Monterey +4
Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions 11.7.7 and earlier macOS Monterey versions 12.6.6 and earlier macOS Ventura versions 13.4 and earlier Description: A logic issue was addressed with improved checks, which may allow an app to gain root privileges. The...
PT-2023-2900 · Apple · Libxpc +1
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.7 macOS versions prior to 12.6.6 macOS versions prior to 13.4 Description: The issue is related to a logic problem with improved state management, allowing an app to modify protected parts of the file system. This...
The vulnerability of the libxpc library in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to escalate their privileges.
The vulnerability of the libxpc library in Mac OS, tvOS, iOS, iPadOS, and watchOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
Apple OS X libxpc Arbitrary File Overwrite Vulnerability
Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in OS X libxpc due to a product design flaw that does not restrict file uploads, which allows malicious applications to overwrite arbitrary files. No details of the vulnerability are...
In-the-wild iOS Exploit Chain 3
Posted by Ian Beer, Project Zero TL;DR This chain targeted iOS 11-11.4.1, spanning almost 10 months. This is the first chain we observed which had a separate sandbox escape exploit. The sandbox escape vulnerability was a severe security regression in libxpc, where refactoring lead to a bounds che...