CVE-2023-28798

CVE-2023-28798 relates to Zscaler Client Connector on macOS, where the pacparser library contains an out-of-bounds write to the heap in a way that may lead to arbitrary code execution. Affected software is Zscaler Client Connector (Mac) using pacparser; root cause is a heap out-of-bounds write. P...

CVE-2023-28798 Out-of-bounds write to heap in pacparser

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

PT-2024-12177

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution. Recommendations At the moment, there is no...

CVE-2023-28798: Heap-based Buffer Overflow

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

PT-2024-19881

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Mac versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten. Recommendations For...

PT-2024-19884

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on MacOS versions prior to 3.4 Description An issue with improper validation of integrity check values in the upgrade process may allow local execution of code. This issue is related to the Zscaler Client Connector on...

CVE-2024-23459: Improper Link Resolution Before File Access

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

Google Chrome Security Update (stable-channel-update-for-desktop_30-2024-04) - MAC OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

UBUNTU-CVE-2024-26961

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154llseckeydel mac802154llseckeydel can free resources of a key directly without following the RCU rules for waiting before the end of a grace period. This may lead to...

PT-2024-19890

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 4.2 Description A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. Recommendations For versions prior to 4.2, update to version 4.2 or later to resolve the issue. ...

Google Chrome security vulnerabilities

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 124.0.6367.118 Linux, 124.0.6367.118/.119 Windows, Mac, which stems from a post-release reuse vulnerability in Picture In Picture that allows remote attackers...

Stable Channel Update for Desktop

The Stable channel has been updated to 124.0.6367.118/.119 for Windows, Mac and 124.0.6367.118 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 124.0.6367.118 for Mac and Windows...

Low: openssl and openssl-fips-provider security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entri...

PT-2024-5393 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image macOS versions before build 41396 Description: The issue is related to a local privilege escalation due to an OS command injection vulnerability. This vulnerability may allow an attacker to elevate their privileges. The...

Google Chrome Security Update (stable-channel-update-for-desktop_24-2024-04) - MAC OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

DEBIAN-CVE-2022-48651

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix out-of-bound bugs caused by unset skb-macheader If an AFPACKET socket is used to send packets through ipvlan and the default xmit function of the AFPACKET socket is changed from devqueuexmit to packetdirectxmit via...

UBUNTU-CVE-2022-48651

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix out-of-bound bugs caused by unset skb-macheader If an AFPACKET socket is used to send packets through ipvlan and the default xmit function of the AFPACKET socket is changed from devqueuexmit to packetdirectxmit via...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds error due to an unset skb-macheader...

Foxit PDF Editor for Mac < 12.1.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 12.1.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution...

Foxit PDF Editor for Mac < 11.1.7 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.7. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution...