1248 matches found
CVE-2018-4055
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successful...
Multiple Apple Products Kernel Information Disclosure Vulnerability
Apple iOS, tvOS, watchOS, and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; watchOS is a smart watch operating system; and macOS High Sierra is a specialized operating system developed for Mac computers. Sier...
Apple macOS High Sierra AMD Input Validation Vulnerability
Apple macOS High Sierra is a suite of specialized operating systems developed for Mac computers by Apple, Inc. AMD is one of the AMD product components. An input validation vulnerability exists in AMD in Apple macOS High Sierra version 10.13.4. An attacker could exploit the vulnerability to execu...
CVE-2018-4217
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...
CleanMyMac X moveToTrashItemAtPath privilege escalation vulnerability
Summary The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product URLs https://macpaw.com/cleanmym...
Clean My Mac X removeLaunchdAgentAtPath privilege escalation vulnerability
Summary An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product...
CleanMyMac X removeItemAtPath Privilege Escalation Vulnerability
Summary The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Tested Versions Clean My Mac X 4.04 Product URLs...
Clean My Mac X pleaseTerminate denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. A user with local access can use this vulnerability to terminate a privileged helper application. An attacker would need local access to the machi...
Apple iOS, macOS Mojave and tvOS Kernel Denial of Service Vulnerability
Apple iOS, macOS Mojave, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS Mojave is a specialized operating system for Mac computers; and tvOS is an operating system for smart televisions. kernel is one of the Kernel is one of the kernel components. A...
Apple macOS Out-of-Bounds Read Vulnerability
macOS is Apple's proprietary operating system for the Mac line of products. An out-of-bounds read vulnerability exists in the ATS component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...
Apple macOS Restricted Memory Read Vulnerability
macOS is Apple's proprietary operating system for the Mac line of products. A restricted memory read vulnerability exists in the Intel Graphics Driver component in Apple macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...
Apple macOS High Sierra AppleGraphicsControl Memory Read Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A memory read vulnerability exists in the AppleGraphicsControl component of Apple macOS High Sierra version 10.13.6, which can be exploite...
Mozilla: Proxy bypass using automount and autofs
Firefox proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. This issue only affects OS X in default...
CVE-2018-15668
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...
Cisco AMP for Endpoints macOS Connector Denial of Service Vulnerability
Cisco AMP for Endpoints Mac Connector Software for macOS is the United States Cisco Cisco company's set of macOS platform based on the integration of static and dynamic malware analysis and threat intelligence in one of the endpoint applications. The program can analyze the behavior and intent of...
The vulnerability of the Bluetooth component of the Mac OS X operating system allows a hacker to disclose sensitive information about the kernel’s memory allocation scheme.
The vulnerability of the Bluetooth component in the Mac OS X operating system is related to the incorrect implementation of security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information about the kernel’s memory allocation scheme through a specially...
The vulnerability of Grand Central Dispatch in the Mac OS X operating system allows a hacker to circumvent the limitations of a isolated environment.
The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...
The vulnerability of the Firmware component of the Mac OS X operating system, which allows a hacker to modify the EFI flash memory regions
The vulnerability of the Firmware component of the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to modify the EFI flash memory areas using a specially crafted privileged application...
The vulnerability of Firefox browser, related to incorrect display of characters in the address bar, allows a hacker to replace the URI address.
The vulnerability of Firefox browsers is related to the incorrect display of Tibetan characters when using certain fonts in OS X’s address bar. Exploiting this vulnerability allows a remote attacker to replace URI addresses...