864 matches found
Adobe Photoshop 26.x < 26.1 Vulnerability (macOS APSB24-101)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.1. It is, therefore, affected by a vulnerability as referenced in the apsb24-101 advisory. - Photoshop Desktop versions 26.0 and earlier are affected by a Use After Free vulnerability that could result in...
Adobe Bridge 14.x < 14.1.4 / 15.x < 15.0.1 Vulnerability (APSB24-103)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.4 or 15.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb24-103 advisory. - Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow Wrap or Wraparound...
Adobe Premiere Pro < 24.6.4 / 25.0 < 25.1 Arbitrary code execution (APSB24-104) (macOS)
The version of Adobe Premiere Pro installed on the remote macOS host is prior to 24.6.4, 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-104 advisory. - Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...
Denial of Service Vulnerability in Multiple Mozilla Products (CNVD-2024-48560)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A denia...
CVE-2024-11698
A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click...
Zoom Apps for macOS < 6.1.5 Informatioon Disclosure (ZSB-24039)
The version of Zoom Workplace Desktop App for macOS installed on the remote host is prior to 6.1.5. It is, therefore, affected by an informatioon disclosure vulnerability as referenced in the ZSB-24039 advisory: - Uncontrolled resource consumption in the installer for some Zoom apps for macOS...
Atlassian SourceTree 4.2.8 RCE
The version of Atlassian SourceTree installed on the remote MacOS host is version 4.2.8. It is, therefore, affected by a remote code execution vulnerability. An attacker, with the interaction of an authorized user, can execute arbitrary code on the affected host. Note that Nessus has not tested f...
Adobe Audition < 24.6.3 Memory leak (APSB24-83) (macOS)
The version of Adobe Audition installed on the remote macOS host is prior to 24.6.3. It is, therefore, affected by a vulnerability as referenced in the APSB24-83 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-47449 Note that Nessus has not tested for this issue...
Fortinet FortiClient - Missing signature verification (FG-IR-24-022) (macOS)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-022 advisory. - An improper verification of cryptographic signature vulnerability CWE-347 in FortiClient MacOS version 7.4.0, version 7.2...
Adobe Photoshop 24.x < 24.7.4 / 25.x < 25.12 Vulnerability (macOS APSB24-89)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 24.7.4/25.12. It is, therefore, affected by a vulnerability as referenced in the apsb24-89 advisory. - Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or...
Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICC...
Apple macOS CoreText Font Ligature Caret List Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from the fact that processing a maliciously crafted file may cause an application to terminate...
PT-2024-31096 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 Description: A logic issue was addressed with improved validation, allowing a sandboxed process to potentially circumvent sandbox restrictions. Recommendations: For macOS versions...
PT-2024-36345 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions 13.7.1 through 15.1 Description: This issue was addressed with additional entitlement checks. A malicious application may be able to leak a user's credentials. Recommendations: Update to macOS version 13.7.1. Update to macOS...
A week in security (October 14 – October 20)
Last week on Malwarebytes Labs: Unauthorized data access vulnerability in macOS is detailed by Microsoft 23andMe will retain your genetic information, even if you delete the account "Nudify" deepfake bots remove clothes from victims in minutes, and millions are using them Tor Browser and Firefox...
Apple macOS AppleGVA Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...
Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...