Mozilla Firefox ESR Security Update (MFSA2024-22) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

The vulnerability of the FortiClient for MAC protection mechanism lies in improper external management of file names or paths, allowing attackers to execute arbitrary code.

The vulnerability of the FortiClient for MAC protection tool is related to incorrect external manipulation of the file name or file path. Exploiting this vulnerability allows an attacker to execute arbitrary code by writing the malicious file to the /tmp directory...

CVE-2023-46689

Improper neutralization in IntelR Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-12838

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper access control in IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...

PT-2024-13369 · Intel · Intel Power Gadget

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper neutralization in the IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...

Google Chrome Security Update (stable-channel-update-for-desktop_15-2024-05) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2024-13291 · Intel · Intel Power Gadget

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS all versions Description: The issue is related to incomplete cleanup in the software, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For...

Adobe Acrobat Reader DC Continuous Security Update (APSB24-07) - Mac OS X

Adobe Acrobat Reader DC Continuous is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat DC Continuous Security Update (APSB24-29) - Mac OS X

Adobe Acrobat DC Continuous is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader Classic 2020 Security Update (APSB24-29) - Mac OS X

Adobe Acrobat Reader Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Classic 2020 Security Update (APSB24-29) - Mac OS X

Adobe Acrobat Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the `bnx2x_set_fw_mac_addr()` function in the `drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h` file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnx2xsetfwmacaddr function in the drivers/net/ethernet/broadcom/bnx2x/bnx2xcmn.h file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

Security Updates for Microsoft Office Products (May 2024) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by a vulnerability as referenced in the may-14-2024 advisory. - Microsoft Excel Remote Code Execution Vulnerability CVE-2024-30042 Note that Nessus has not tested for this issue but has instead relied only on the...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 125 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 125.0.6422.60 Linux 125.0.6422.60/.61 Windows, Mac contains a number of fixes and improvements -- a list of changes is...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to a stack buffer overrun in the Double Parse routine. An attacker can execute arbitrary code by supplying a specially crafted input that triggers the buffer overrun. Remediation Upgrade...

CVE-2024-27825

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences...

Google Chrome Security Update (stable-channel-update-for-desktop_13-2024-05) - Mac OS X

Google Chrome is prone to an out of bounds write vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is an outdoor wireless client terminal device from China Gion Electronics TOTOLINK, which is mainly used to provide wireless broadband access services, especially for wireless network coverage in rural or remote areas. The TOTOLINK CP450 suffers from a buffer overflow vulnerability...

CVE-2024-27825

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences...

CVE-2024-27825

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences...