IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref 是 CVE-2017-2388 的概念验证漏洞利用程序，这是一个 IOFireWireUserClient 中的空指针解引用漏洞，已在 macOS Sierra 10.12.4 中修复。该漏洞可被触发，导致带有 FireWire 端口的设备发生拒绝服务。 CVE-2017-2388 函数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop 在将参数 inAsyncRef 作为源调用 bcopy 之前，未检查...

📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation

macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...

CVE-2018-4467

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious...

CVE-2019-6238

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. Processing a maliciously crafted package may lead to arbitrary...

SUSE CVE-2016-4606

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks...

PT-2021-8556

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.1 macOS Sierra versions prior to Security Update 2017-001 macOS El Capitan versions prior to Security Update 2017-004 Description A memory corruption issue was addressed with improved memory handling. ...

Memory corruption

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS...

PT-2020-11260

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.2 macOS Mojave versions prior to 10.14.4 macOS High Sierra versions prior to Security Update 2019-002 macOS Sierra versions prior to Security Update 2019-002 iOS versions prior to 12.2 Description A validation issue...

PT-2020-11259

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.2 macOS Mojave versions prior to 10.14.4 macOS High Sierra versions prior to Security Update 2019-002 macOS Sierra versions prior to Security Update 2019-002 iOS versions prior to 12.2 Description A use after free...

PT-2020-11275

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.2 macOS Mojave versions prior to 10.14.4 macOS High Sierra versions prior to Security Update 2019-002 macOS Sierra versions prior to Security Update 2019-002 iOS versions prior to 12.2 Description A logic issue was...

About the security content of macOS Sierra 10.12.2, Security Update 2016-003 El Capitan, and Security Update 2016-007 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2016-4606

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks...

CVE-2016-4606

CVE-2016-4606 affects curl before 7.49.1 on Apple OS X versions prior to macOS Sierra 10.12. The vulnerability allows remote or local attackers to execute arbitrary code, obtain sensitive information, cause denial-of-service, bypass security restrictions, and perform unauthorized actions. Root ca...

About the security content of SwiftNIO HTTP/2 1.5.0 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

macOS Sierra / High Sierra Multiple Vulnerabilities (Security Update 2019-004)

The remote host is running Mac OS X 10.12.6 or Mac OS X 10.13.6 and is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An application may be able to read restricted memory CVE-2019-8691, CVE-2019-8692, CVE-2019-8693 - Extracting a zip file containing a symbol...

Apple macOS High Sierra, OS X El Capitan and macOS Sierra SIP Component Misconfiguration Vulnerability

Apple macOS Sierra is a specialized operating system for Mac computers. apple macOS High Sierra is a product of Apple Inc. apple macOS High Sierra is a specialized operating system for Mac computers. apple OS X El Capitan is a specialized operating system for Mac computers. apple OS X El Capitan ...

CVE-2018-4427

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006...

CVE-2018-4427

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006...

Memory corruption

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006...

CVE-2017-13911

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2...