Mozilla Firefox ESR < 91.8

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-14 advisory. - Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla...

macOS 12.x < 12.2 (HT213054)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.2 Monterey. It is, therefore, affected by multiple vulnerabilities, including the following: - A memory corruption issue in IOMobileFrameBuffer that can lead to arbitrary code execution with kernel privileges due to...

PT-2021-19039 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.2 Description: An out-of-bounds read issue was addressed with improved input validation, which may allow a malicious application to execute arbitrary code with system...

macOS 11.x < 11.3 (HT212325)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.3 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - A memory corruption issue which could allow an application restricted memory read access CVE-2021-1808. - A memory...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO that stems from a boundary error when processing image files within the ImageIO component in macOS. A remote attacker can create a speciall...

Vulnerabilities fixed in Apple macOS

Apple has fixed a large number of vulnerabilities in Apple MacOS Big Sur 11, Catalina 10.15 and Mojave 10.14. A malicious person can exploit the vulnerabilities to cause the following types of damage cause: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data -= Apple...

SAD DNS — New Flaws Re-Enable DNS Cache Poisoning Attacks

A group of academics from the University of California and Tsinghua University has uncovered a series of critical security flaws that could lead to a revival of DNS cache poisoning attacks. Dubbed "SAD DNS attack" short for Side-channel AttackeD DNS, the technique makes it possible for a maliciou...

Vulnerabilities fixed in macOS

Vulnerabilities have been fixed in macOS. The vulnerabilities allow a malicious person to carry out attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data -= Apple =- Apple has made updates...

Multiple vulnerabilities fixed in macOS

Apple has fixed several vulnerabilities in macOS. The vulnerabilities allow a malicious person remote or otherwise to perform able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root...

macOS 10.13.x < 10.13.3 Multiple Vulnerabilities

Binary data 700514.prm...

macOS 10.14.x < 10.14.3 Multiple Vulnerabilities

Binary data 700521.prm...

macOS < 10.14 Multiple Vulnerabilities

Binary data 700518.prm...

macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)

Binary data 700513.prm...

macOS 10.13.x < 10.13.5 Multiple Vulnerabilities

Binary data 700516.prm...

How Just Opening A Site In Safari Could Have Hacked Your Apple macOS

Earlier this week Dropbox team unveiled details of three critical vulnerabilities in Apple macOS operating system, which altogether could allow a remote attacker to execute malicious code on a targeted Mac computer just by convincing a victim into visiting a malicious web page. The reported...

macOS 10.12.x < 10.12.5 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the Kernel component that allow a local attacker to gain kernel-level privileges. CVE-2017-2494, CVE-2017-2546 - A...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to circumvent cryptographic security measures

The vulnerability of the Security component in iOS and Mac OS X operating systems is related to the insufficient robustness of the 3DES encryption algorithm. Exploiting this vulnerability allows a malicious actor to circumvent the cryptographic security measures...