JVN#01937209: LINE WORKS Drive Explorer vulnerable to code injection

LINE WORKS Drive Explorer provided by WORKS MOBILE Japan Corp. contains a code injection vulnerability CWE-94. Impact An attacker who can login to the client where the affected product is installed may inject arbitrary code while processing the product execution. Since a full disk access privileg...

CVE-2023-28143

Qualys Cloud Agent for macOS versions 2.5.1-75 before 3.7 installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX macOS 10.15 and older versions. Attackers may exploit incorrect file permissions to give them ROOT command execution...

PT-2023-19012 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 tvOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The...

PT-2023-19005 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.3 macOS versions prior to 12.6.3 macOS versions prior to 13.2 Description: A buffer overflow issue was addressed with improved memory handling. Mounting a maliciously crafted Samba network share may lead to...

CVE-2022-32862

This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, macOS Monterey 12.6.1. An app with root privileges may be able to access private information...

PT-2022-21553 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved checks, allowing a sandboxed process to potentially circumvent sandbox restrictions. Recommendations: For versions prior to 13, update to macOS Ventura 13 to...

PT-2022-7233 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to improper access control in the macOS operating system's Sandbox component. An app with root privileges may be able to access private information due to this issue. The estimated...

PT-2022-21543 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved restrictions. This issue allows a shortcut to potentially view the hidden photos album without authentication. Recommendations: For versions prior to 13, update...

CVE-2022-32805

The issue was addressed with improved handling of caches. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to access sensitive user information...

PT-2022-6381 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7 and 16 Apple iPadOS versions prior to 15.7 Apple macOS versions prior to Big Sur 11.7 and Monterey 12.6 Description: The issue is related to a buffer overflow vulnerability that may allow an application to...

PT-2022-4162 · Zoom · Zoom Client For Meetings

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings for macOS versions 5.7.3 through 5.11.5 Description: The issue is related to a vulnerability in the auto update process, specifically due to incorrect cryptographic signature verification. This could allow a local...

PT-2022-21523 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.8 macOS versions prior to 12.5 Description: An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted AppleScript binary may result in unexpected termination or...

CVE-2022-26748

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-26770

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges...

PT-2022-7005

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.5 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple macOS Big Sur versions prior to 11.6.6 Apple macOS Monterey versions prior to 12.4 Apple macOS...

CVE-2022-22627

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22780

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availabili...

PT-2021-18973 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.1 Description: The issue involves multiple out-of-bounds write problems that have been resolved through enhanced bounds checking. A malicious application could potentially execute arbitrary code with kernel...

PT-2021-19009 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A logic issue was addressed with improved state management, which could cause user...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a vulnerability due to improper security restrictions, where a sandboxed process may be able to bypass the sandbox restrictions. The vulnerabilit...