Apple iOS, tvOS and macOS Mojave configd elevation of privilege vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. configd is one of the system configuration daemon component. A security vulnerability exists in the...

Apple macOS Mojave DiskArbitration Logic Flaw Vulnerability

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.DiskArbitration is one of the components used to handle disk mounts. A security vulnerability exists in the DiskArbitration component in Apple macOS Mojave versions prior to 10.14.4. An attacker could use this...

Apple iOS, tvOS and macOS Mojave Kernel Logic Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple macOS Mojave is a specialized operating system developed for Mac computers.Apple MacOS Mojave is an operating system developed for Mac computers. Kernel is one of the kernel...

CVE-2018-4055

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successful...

Apple macOS High Sierra AMD Input Validation Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed for Mac computers by Apple, Inc. AMD is one of the AMD product components. An input validation vulnerability exists in AMD in Apple macOS High Sierra version 10.13.4. An attacker could exploit the vulnerability to execu...

Multiple Apple Products Kernel Information Disclosure Vulnerability

Apple iOS, tvOS, watchOS, and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; watchOS is a smart watch operating system; and macOS High Sierra is a specialized operating system developed for Mac computers. Sier...

CVE-2018-4217

In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...

CleanMyMac X moveToTrashItemAtPath privilege escalation vulnerability

Summary The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product URLs https://macpaw.com/cleanmym...

CleanMyMac X removeItemAtPath Privilege Escalation Vulnerability

Summary The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product URLs...

Clean My Mac X pleaseTerminate denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. A user with local access can use this vulnerability to terminate a privileged helper application. An attacker would need local access to the machi...

Clean My Mac X removeLaunchdAgentAtPath privilege escalation vulnerability

Summary An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product...

Apple iOS, macOS Mojave and tvOS Kernel Denial of Service Vulnerability

Apple iOS, macOS Mojave, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS Mojave is a specialized operating system for Mac computers; and tvOS is an operating system for smart televisions. kernel is one of the Kernel is one of the kernel components. A...

Apple macOS Out-of-Bounds Read Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. An out-of-bounds read vulnerability exists in the ATS component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...

Apple macOS Restricted Memory Read Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. A restricted memory read vulnerability exists in the Intel Graphics Driver component in Apple macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...

Apple macOS High Sierra AppleGraphicsControl Memory Read Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A memory read vulnerability exists in the AppleGraphicsControl component of Apple macOS High Sierra version 10.13.6, which can be exploite...

Mozilla: Proxy bypass using automount and autofs

Firefox proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. This issue only affects OS X in default...

CVE-2018-15668

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...

Cisco AMP for Endpoints macOS Connector Denial of Service Vulnerability

Cisco AMP for Endpoints Mac Connector Software for macOS is the United States Cisco Cisco company's set of macOS platform based on the integration of static and dynamic malware analysis and threat intelligence in one of the endpoint applications. The program can analyze the behavior and intent of...

The vulnerability of the Firmware component of the Mac OS X operating system, which allows a hacker to modify the EFI flash memory regions

The vulnerability of the Firmware component of the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to modify the EFI flash memory areas using a specially crafted privileged application...

The vulnerability of Grand Central Dispatch in the Mac OS X operating system allows a hacker to circumvent the limitations of a isolated environment.

The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...