Mozilla Firefox Security Advisories (mfsa_2024-01) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Advisories (mfsa_2024-02) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Arbitrary Command Injection

Overview network is a the missing network utilities in Node.js. Affected versions of this package are vulnerable to Arbitrary Command Injection due to use of the childprocess exec function without input sanitization. If attacker-controlled user input is given to the macaddressfor function of the...

CVE-2024-23209

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3. Processing web content may lead to arbitrary code execution...

CVE-2023-42915

CVE-2023-42915 is rejected/not used and does not represent an active vulnerability entry.

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS. A malicious party could exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

Apple Mac OS X Security Update (HT214058)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.85 for Mac and Linux and 121.0.6167.85/.86 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

The vulnerability of the Find My function in the macOS operating system, which allows a intruder to disclose protected information

The vulnerability of the Find My function in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

The vulnerability of the Model I/O framework in the macOS operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the Model I/O framework in the macOS operating system arises due to buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Foundation component of the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the Foundation component of the macOS operating system is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Sandbox component of the macOS operating system, which allows a violator to disclose protected information

The vulnerability of the Sandbox component in the macOS operating system is related to improper access control. Exploiting this vulnerability can allow a hacker to disclose protected information...

The vulnerability of the Sandbox component of the macOS operating system, which allows a violator to disclose protected information

The vulnerability of the Sandbox component in the macOS operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a hacker to disclose protected information...

PT-2024-1512 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: network versions prior to 0.7.0 Description: The issue exists due to insufficient input validation in the child process exec function of the Node.js Network utility. This allows a remote attacker to execute arbitrary commands on the operating...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial-of-service vulnerability, which is caused due to free usage when applying updates on macOS. An attacker can exploit the vulnerability to cause the browser to crash...

Apple Mac OS X Security Updates (HT214057)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Mac OS X Security Update (HT214061)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Image Capture component in the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the Image Capture component in the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the AppSandbox component of the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the AppSandbox component of the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to execute arbitrary control commands...

The vulnerability of the LaunchServices component in the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the LaunchServices component in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to disclose protected information...