macOS 11.x < 11.7.10 (HT213915)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.10. It is, therefore, affected by a vulnerability: - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.5.2, iOS 16.6.1 and iPadOS 16.6.1. Processing a...

macOS 11.x < 11.7.9 Multiple Vulnerabilities (HT213845)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.9. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS...

macOS 11.x < 11.7.5 Multiple Vulnerabilities (HT213675)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.5. It is, therefore, affected by multiple vulnerabilities: - A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An...

macOS 11.x < 11.7.1 Multiple Vulnerabilities (HT213493)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.1. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16,...

macOS 11.x < 11.6.8 (HT213344)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.8 Big Sur. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds write issue vulnerability may lead to arbitrary code execution. CVE-2022-32787 - Exploitation of this vulnerability may lead t...

macOS 11.x < 11.6.1 (HT212872)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.1 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Upda...

A week in security (August 16 – August 22)

Last week on Malwarebytes Labs: Podcast: Katie Moussouris hacked Clubhouse. Her emails went unanswered for weeks. How to troubleshoot hardware problems that look like malware problems. Analysts “strongly believe” the Russian state colludes with ransomware gangs. macOS 11’s hidden security...

UBUNTU-CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

Updated XCSSET Malware Targets Telegram, Other Apps

In our last update on the XCSSET campaign, we updated some of its features targeting latest macOS 11 Big Sur. Since then, the campaign added more features to its toolset, which we have continually monitored. We have also discovered the mechanism used to steal information from various apps, a...

macOS 11.x < 11.4 (HT212529)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.4 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - A remote attacker may be able to cause unexpected application termination or arbitrary code execution. CVE-2021-30712 - A...

macOS 11.x < 11.3.1 Multiple Vulnerabilities (HT212335)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.3.1 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - An integer overflow was addressed with improved input validation CVE-2021-30663. - A memory corruption issue was address...

XCSSET Quickly Adapts to macOS 11 and M1-based Macs

This latest update details our new research on XCSSET, including the ways in which it has adapted itself to work on both ARM64 and x86x64 Macs...

SUSE SLED15 / SLES15 Security Update : MozillaThunderbird / mozilla-nspr (SUSE-SU-2020:3091-1)

This update for MozillaThunderbird and mozilla-nspr fixes the following issues : Mozilla Thunderbird 78.4 - new: MailExtensions: browser.tabs.sendMessage API added - new: MailExtensions: messageDisplayScripts API added - changed: Yahoo and AOL mail users using password authentication will be...