PT-2021-18849 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 14.7 Apple macOS versions prior to Big Sur 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple macOS Mojave versions prior to Security Update 2021-005 Apple macOS Catalina versions prio...

The vulnerability of the FortiClient for MacOS protection mechanism lies in the incorrect handling of the link before accessing the file, allowing attackers to execute arbitrary code.

The vulnerability of the FortiClient for MacOS protection mechanism is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using malicious web content...

The vulnerability of the libxml2 library in Mac OS operating systems allows attackers to execute arbitrary code or cause system failures.

The vulnerability of the libxml2 library in Mac OS operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

The vulnerability of the libxml2 library in Mac OS operating systems allows attackers to execute arbitrary code.

The vulnerability of the libxml2 library in Mac OS operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of the PackageKit package for Mac OS operating systems allows attackers to increase their privileges.

The vulnerability of the PackageKit package for Mac OS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

webkitgtk: Input validation issue leading to cross site scripting attack

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

Apple macOS 注入漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An injection vulnerability exists in macOS due to insufficient validation of user-supplied input within the ImageIO component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1...

PT-2021-7320 · Apple +7 · Macos Monterey +12

Name of the Vulnerable Software and Affected Versions: WPE WebKit versions prior to the fixed version iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS...

CVE-2021-1738

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution...

PT-2021-2369 · Cisco · Cisco Jabber For Windows +2

Name of the Vulnerable Software and Affected Versions: Cisco Jabber for Windows affected versions not specified Cisco Jabber for MacOS affected versions not specified Cisco Jabber for mobile platforms affected versions not specified Description: The issue is related to insufficient input validati...

Keybase Desktop Client Security Vulnerability

Keybase is a social networking platform that supports end-to-end encryption based on PGP technology. A security vulnerability exists in the Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, which allows an attacker to obtain potentially sensitive media in the...

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A buffer error vulnerability exists in Apple ImageIO that could allow a remote attacker to access potentially sensitive information. The following products and versions are affected: macOS...

Apple ImageIO Security Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO that could allow a remote attacker to compromise an affected system. The following products and versions are affected: macOS: 10.15, 10.15...

Apple Power Management Security Vulnerability

Apple Power Management is the power management program for Apple devices from Apple, Inc. A security vulnerability exists in Apple Power Management that allows a local application to escalate privileges on the system. The following products and versions are affected: macOS: 10.3, 10.12.4, 10.12.5...

Apple IOSkywalkFamily Buffer Error Vulnerability

Apple IOSkywalkFamily is a core component of Apple Inc. that is used to provide management network driver functionality for mobile devices. A security vulnerability exists in Apple IOSkywalkFamily that originates from a boundary condition within the IOSkywalkFamily component in macOS. A local use...

CVE-2020-26085

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system OS with elevated privileges or gain access to sensitive information. For more information about these...

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS where processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected: macOS Mojave 10.14.6,...