CVE-2021-3187

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script that executes as root from a temporary directory during install time. This applies to macOS before 10.15.5, or Security Update...

CVE-2020-25779

Trend Micro Antivirus for Mac 2020 Consumer has a vulnerability in which a Internationalized Domain Name homograph attack Puny-code could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature...

CVE-2019-14432

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack...

CVE-2019-19695

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 v9.0.1379 and below could potentially allow an attacker to create a symbolic link to a target file and modify it...

CVE-2019-15704

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

CVE-2025-3651

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allows attackers to execute arbitrary commands via unauthorized access to the Agent service. This has been remediated in Work Desktop for Mac version 10.8.2.33...

NTFS Tool 安全漏洞

NTFS Tool is an NTFS tool for mac from the individual developer of NTFS Tool. A security vulnerability exists in NTFS Tool version 3.5.1 that stems from insecure information storage and could lead to an attacker obtaining application passwords...

The vulnerability of the Microsoft AutoUpdate (MAU) for Mac application, related to synchronization errors when using a shared resource, allows a hacker to escalate their privileges.

The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

Citrix Workspace app for Mac Security Bulletin for CVE-2024-7549

Description of Problem A vulnerability has been discovered in Citrix Workspace app for Mac, which, if exploited, may result in a session hijack of a user who is authenticated on cloud stores. Affected Versions: The following supported versions of Citrix Workspace app for Mac are affected by the...

Parallels Desktop Mac 安全漏洞

Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. A security vulnerability exists in Parallels Desktop Mac version 19.3.0 and earlier, which stems from a lack of code signature verification and allows an attacker to elevate privileges vi...

The vulnerability of the Microsoft OneNote software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft OneNote note-taking software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

AgileBits 1Password For Mac 安全漏洞

AgileBits 1Password For Mac is a password management software from AgileBits Canada. It is used to store a variety of different passwords. A security vulnerability exists in AgileBits 1Password For Mac versions prior to 8.10.38, which stems from a vulnerability that allows a local attacker to...

Clario VPN client 安全漏洞

Clario VPN client is a VPN client for Mac from Clario. A security vulnerability exists in Clario VPN client version 2024-04-11 and earlier, which stems from the presence of weak privileges to load DLLs using system privileges...

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Mac versions prior to 5.7, which originates from an authenticated, unprivileged user being able to eleva...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome before 120.0.6099.62 Linux, Mac, before 120.0.6099.62/.63 Windows, which stems from a post-release reuse issue in Media Stream...

CVE-2023-32546

Code injection vulnerability exists in Chatwork Desktop Application Mac 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent...

SUSE CVE-2013-0892

Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors...

SUSE CVE-2018-6147

Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process...