SUSE CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipie...

SUSE CVE-2022-1481

Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2022-1874

Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page...

SUSE CVE-2022-3053

Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted HTML page...

SUSE CVE-2022-3541

A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2swnvmemgetmacaddress of the file drivers/net/ethernet/sunplus/spl2swdriver.c of the component BPF. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. T...

SUSE CVE-2022-3628

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges...

SUSE CVE-2022-32816

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing...

SUSE CVE-2022-46875

The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.. This vulnerability affects Firefox 108, Firefox ESR 102.6, and...

Update now! Apple patches vulnerabilities in MacOS and iOS

Apple has released information about the new security content of macOS Ventura 13.2.1 and of iOS 16.3.1 and iPadOS 16.3.1. Most prominent is a vulnerability in WebKit that may have been actively exploited. In December, 2022, we warned our readers about another actively exploited vulnerability in...

Microsoft Office Outlook 2019 RCE Vulnerability (Feb 2023) - Mac OS X

This host is missing an important security update for Microsoft Office Outlook 2019 on Mac OS X according to Microsoft security update February 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Adobe Bridge 12.x < 12.0.4 / 13.x < 13.0.2 Multiple Vulnerabilities (APSB23-09)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 12.0.4 or 13.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-09 advisory. - Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an out-of-boun...

Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After...

Vulnerabilities fixed in Apple macOS, iOS, iPadOS and Safari

Apple has fixed vulnerabilities in macOS Ventura, iOS, iPadOS and Safari for Big Sur and Monterey. A malicious party could exploit vulnerabilities to execute arbitrary code, or to gain access to sensitive data. To execute code with kernel privileges, or to gain access to sensitive data, the...

GSD-2023-1001991 net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)

net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by...

PT-2023-35067 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns a possible null dereference when updating MAC security entity SecY in the net/mlx5e component. The actual impact and attack plausibility have not yet been proven...

The vulnerability of the Broadcom Full MAC Wi-Fi driver (drivers/net/wireless/broadcom/brcm80211/brcmfmac) in Linux operating systems allows a hacker to increase their privileges or cause service failures.

The vulnerability of the Broadcom Full MAC Wi-Fi driver drivers/net/wireless/broadcom/brcm80211/brcmfmac in Linux operating systems is caused by buffer overflows. Exploiting this vulnerability can allow attackers to gain increased privileges or cause service interruptions...

Chrome 110 Tackles a Collection of Security Weaknesses

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chrome version 110 is now being rolled out to the stable channels for Windows, Mac, and Linux users. This update includes bug fixes and improvements, specifically addressing security issues...

Google Chrome Security Updates (stable-channel-update-for-desktop-2023-02) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2022-45854

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50ABTG.0C0, which could allow a LAN attacker to cause a temporary denial-of-service DoS by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker...

CVE-2022-45854

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50ABTG.0C0, which could allow a LAN attacker to cause a temporary denial-of-service DoS by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker...