CVE-2022-28762

Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera mode rendering context is enabled as part of the Zoom App Layers API by running certain Zoom Apps, a local debugging port is opened by the...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and versions are...

Security Bulletin: Vulnerabilities in FasterXML Jackson Databind and Apache Xerces affect IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments

Summary IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments may be affected by the below FasterXML Jackson Databind and Apache Xerces vulnerabilities CVEs. Vulnerability Details CVEID:CVE-2020-25649 DESCRIPTION:...

DEBIAN-CVE-2022-3053

Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted HTML page...

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS allows attackers to circumvent security restrictions.

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla Thunderbird that stems from an...

Apple macOS Monterey 和 macOS Big Sur 安全漏洞

Apple macOS Big Sur and Apple macOS Monterey are products of Apple Inc. Apple macOS Big Sur is the 17th major release of Apple's macOS operating system for the MAC. apple macOS Monterey is the 18th major release of Apple's macOS desktop operating system for the MAC. Apple macOS Monterey is the 18...

PT-2022-21572 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6 macOS Big Sur versions prior to 11.7 iOS versions prior to 15.7 iOS versions prior to 16 iPadOS versions prior to 15.7 Description: The issue allows an app to potentially execute arbitrary code with kernel...

PT-2022-21582 · Apple · Ipados +7

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 16.1 Apple macOS Big Sur versions prior to 11.7 Apple macOS Ventura versions prior to 13 Apple watchOS versions prior to 9.1 Apple iOS versions prior to 16.1 Apple iPadOS versions prior to 16 Apple macOS Monterey...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google Inc. A security vulnerability exists in Google Chrome, which stems from an improperly implemented issue in Chrome OS lockscreen, and affects the following products and versions: Chrome before 105.0.5195.52 Mac/linux and before 105.0.5195.52/53/54 Windows...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improper implementation issue in Site Isolation and affects the following products and versions: Chrome prior to 105.0.5195.52 Mac/linux and 105.0.5195.52/53/54 Windows...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from a post-release reuse issue in WebSQL and affects the following products and versions: Chrome prior to 105.0.5195.52 Mac/linux and 105.0.5195.52/53/54 Windows...

UBUNTU-CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on macOS arises from improper verification of the cryptographic signature. This allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of clients for conducting real-time audio and video conferences using Zoom Client for Meetings on macOS is related to an improper verification of the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands with root privileg...

The vulnerability of the kernel of operating systems macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability in the kernels of operating systems such as macOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client macOS Standard and IT Administrator Editions version 5.7.3 through versions prior to 5.11.6. An attacker exploited the vulnerability to escalate to...

The vulnerability of the automatic update function for conducting audio and video conferences in real-time with Zoom Client for Meetings for macOS allows a malicious individual to elevate their privileges to root level.

The vulnerability of the automatic update function for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to elevate their privileges to the...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client for MacOS Standard and IT Management Editions versions prior to 5.7.3 through 5.11.5, which originates from a vulnerability that can be exploited b...

The vulnerability of the XPC service implementation in the Mac OS X operating system allows a perpetrator to bypass the authentication process.

The vulnerability of the XPC service implementation in the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass authentication procedures and gain administrator privileges...