SUSE CVE-2015-5559

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional videoconferencing systems. A security vulnerability exists in Zoom Rooms for macOS clients versions prior to 5.11.3. An attacker can exploit the...

CVE-2021-32692 Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt

Activity Watch is a free and open-source automated time tracker. Versions prior to 0.11.0 allow an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. The attacker can exploit this vulnerability by having the user visiting a website with the page title set to a...

Gatekeeper’s Achilles heel: Unearthing a macOS vulnerability

On July 27, 2022, Microsoft discovered a vulnerability in macOS that can allow attackers to bypass application execution restrictions imposed by Apple’s Gatekeeper security mechanism, designed to ensure only trusted apps run on Mac devices. We developed a proof-of-concept exploit to demonstrate t...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in versions of Apple macOS prior to Ventura 13, which can be exploited by an attacker to record audio using paired AirPods . The following products and versions are affected: m...

CVE-2022-32942

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

Apple macOS 资源管理错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from reuse after release, where applications may be able to execute arbitrary code with kernel privileges. The following products and versions are...

PT-2022-28138 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection. Recommendations: For versions prior to 13, update to macOS Ventura 13 to resolve t...

Apple macOS 后置链接漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from the handling of maliciously crafted DMG files could lead to the execution of arbitrary code with system privileges. The following products and...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from the fact that sandboxed applications may be able to determine which application is currently using the camera. The following products and...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from the fact that users with physical access to the device may be able to use Siri to obtain some call log information. The following products and...

PT-2022-21557 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 macOS Big Sur versions prior to 11.7 Description: A user may be able to view sensitive user information due to this issue. The estimated number of potentially affected devices worldwide is not specified. This issu...

Node.js: Node 18 reads openssl.cnf from /home/iojs/build/... upon startup on MacOS

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: Similar to...

PT-2022-4375 · Zoom · Zoom Client For Meetings

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings versions prior to 5.11.3 Description: The issue is related to incorrect cryptographic signature validation in the update process of the Zoom Client for Meetings for macOS. This could allow a local low-privileged user ...

PT-2022-21547 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: The issue allows an app to potentially access user-sensitive data. It was addressed by enabling hardened runtime. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve...

PT-2022-21469 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: A logic issue was addressed with improved checks, allowing an app to potentially bypass Privacy preferences. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the...

PT-2022-21509 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina Description: An access issue was addressed with improvements to the sandbox, allowing an app to potentially access sensiti...

PT-2022-21488 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina Description: The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kern...

PT-2022-21494 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: The issue was addressed with improved memory handling. An app may be able to leak sensitive kernel state. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issu...