SUSE CVE-2022-1481

Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2022-1874

Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page...

The vulnerability of the Fortinet FortiClient for Mac security tool arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to bypass security restrictions and execute arbitrary commands.

The vulnerability of the Fortinet FortiClient for Mac protection tool is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows an attacker to bypass security restrictions and execute arbitrary commands...

PT-2022-5516 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient protection of internal data in Microsoft Office for Mac, which could allow an attacker to gain unauthorized access to protected information...

A Single Flaw Broke Every Layer of Security in MacOS

An injection flaw allowed a researcher to access all files on a Mac. Apple issued a fix, but some machines may still be vulnerable...

A week in security (June 13 – June 19)

Last week on Malwarebytes Labs: Serious vulnerabilities found in ITarian software, patches available for SaaS products Update Chrome now: Four high risk vulnerabilities found Taking down the IP2Scam tech support campaign Don’t panic! “Unpatchable” Mac vulnerability discovered Introducing...

Trend Micro Antivirus for Mac 后置链接漏洞

Trend Micro Antivirus for Mac is a Mac-based antivirus software from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Antivirus for Mac version 11.5, which could be exploited to create a specially crafted file as a symbol that could lead to elevation of privilege li...

CVE-2022-23280

Microsoft Outlook for Mac Security Feature Bypass Vulnerability...

Trend Micro Antivirus for MAC vulnerable to improper access controls

Overview Trend Micro Incorporated has released a security update for Trend Micro Antivirus for MAC. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A user who can login to the system where the affected product is installed may...

Trend Micro Antivirus for Mac Elevation of Privilege Vulnerability

Trend Micro Antivirus is a professional anti-virus application developed by Trend Micro, a globally recognized leader in computer security.Trend Micro Antivirus for Mac is the Mac version. An elevation of privilege vulnerability exists in Trend Micro Antivirus for Mac versions 2020 v10.5, 2021 v1...

Microsoft OneDrive for Mac suffers from dll hijacking vulnerability (CNVD-2021-05387)

Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...

Microsoft OneDrive for Mac suffers from dll hijacking vulnerability

Microsoft OneDrive is a cloud backup application. The program features automatic backup of photo albums, online work and file sharing. Microsoft OneDrive for Mac suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious cod...

McAfee Data Loss Prevention Endpoint for Mac Credential Protection Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...

Cisco Webex Meetings Desktop App Trust Management Issue Vulnerability

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. A trust management issue vulnerability exists in the software update feature in the Cisco Webex Meetings Desktop App prior to version 39.5.11 Mac, which arises from the...

Symantec Norton Security for Mac Certificate Spoofing Hole

Symantec Norton Security for Mac is a set of Mac-based security protection software from Symantec Symantec. A certificate spoofing hole exists in versions of Symantec Norton Security for Mac prior to 7.6. An attacker can exploit this vulnerability to spoof a valid server and perform a...

Intercom MaLion for Windows and MaLion for Mac Authentication Bypass Vulnerability

Intercom MaLion for Windows and MaLion for Mac are both products of Intercom Japan. Intercom MaLion for Windows is an IT asset management solution based on the Windows platform. maLion for Mac is a version based on the Mac platform. A security vulnerability exists in Intercom MaLion 5.2.1 and...

Microsoft Auto Updater for Mac Local Elevation of Privilege Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. An elevation of privilege vulnerability exists in the Microsoft Auto Update MAU application for Mac that fails to properly validate updates before execution. The vulnerability can be...

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2016-10596)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An arbitrary code execution vulnerability exists in Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier, which stems from the program's use of default global writable...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the AppleRAID component in the Mac OS X operating system arises from buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory corruption through a specially created applicatio...

Apple OS X Keychain Entry Access Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X has a security vulnerability that allows an attacker to exploit the vulnerability to access the target user's Keychain entries and obtain sensitive information...