Google Chrome Security Update (stable-channel-update-for-desktop_8-2024-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office for Mac and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Mozilla Firefox < 131.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 131.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-51 advisory. - An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Microsoft AutoUpdate (MAU) Privilege Escalation

The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-45880

A command injection vulnerability exists in the Motorola CX2L router (v1.0.2 and below) within the SetStationSettings function. The root cause is the system's direct invocation of system functions to execute commands—such as setting the MAC address —without proper input filtering . This flaw allo...

CVE-2024-45880

A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This...

Citrix Workspace app for Mac Security Bulletin for CVE-2024-7549

Description of Problem A vulnerability has been discovered in Citrix Workspace app for Mac, which, if exploited, may result in a session hijack of a user who is authenticated on cloud stores. Affected Versions: The following supported versions of Citrix Workspace app for Mac are affected by the...

CVE-2024-45880

A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This...

Large scale Google Ads campaign targets utility software

After what seemed like a long hiatus, we've observed threat actors returning to malvertising to drop malware disguised as software downloads. The campaign we identified is high-impact, going after utility software such as Slack, Notion, Calendly, Odoo, Basecamp, and others. For this blog, we...

PT-2024-36845

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability has been resolved in the Linux kernel, specifically in the ath12k module. The issue occurs during the removal of the ath12k module, where the ath12k mac...

PT-2024-6999 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L B1 version 2.06 Description: A critical issue was found in the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument curTime leads to buffer overflow. This can be exploited by sending...

PT-2024-39659 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to signature 24092400 Description: A null-pointer-dereference issue exists in the signature verification module of AVG/Avast Antivirus on MacOS. This issue may allow a malformed xar file to crash the...

Avast Antivirus security vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24092400, which stems from a null pointer dereference issue that may cause the application to crash on MacOS systems when processing malformed xar...

Avast Antivirus security vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24092400, which stems from an out-of-bounds write issue that may cause the application to crash on MacOS systems when processing malformed Mach-O fil...

Tenda AX1803 fromAdvSetMacMtuWan Function Use-After-Free

The vulnerability of the fromAdvSetMacMtuWan function in the /goform/AdvSetMacMtuWan microprogramming software for the Tenda AX1803 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Mozilla Thunderbird Security Update (MFSA2024-50) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Firefox ESR Security Update (MFSA2024-48) - Mac OS X

Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Update (MFSA2024-46) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Thunderbird ESR Security Update (MFSA2024-49) - Mac OS X

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...