Persistence – Disk Clean-up

Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading - Persistence - Disk Clean-up...

Webmin cross-site scripting vulnerability (CNVD-2024-06437)

Webmin is the Webmin community's set of Web-based system administration tools for Unix-like operating systems. A cross-site scripting vulnerability exists in Webmin v.2.105 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and...

The vulnerability of the TCC (Transparency, Consent, and Control) mechanism in operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS allows a perpetrator to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the TCC Transparency, Consent, and Control mechanism in operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS is related to insecure temporary files. Exploiting this vulnerability can allow attackers to bypass security restrictions and gain unauthorized access to...

The vulnerability of the ImageIO component in iOS, tvOS, macOS, watchOS, iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the ImageIO component in iOS, tvOS, macOS, watchOS, and iPadOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the ImageIO component in iOS, tvOS, macOS, watchOS, iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the iOS operating system, tvOS operating system, macOS operating system, watchOS operating system, and iPadOS operating system is related to reading data outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive informati...

The vulnerability of the kernel of operating systems macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the kernel in operating systems such as macOS, iOS, and iPadOS is related to a type conversion error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Find My function in macOS, iOS, and iPadOS allows a perpetrator to disclose protected information.

The vulnerability of the Find My function in macOS, iOS, and iPadOS relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Photos storage in operating systems such as macOS, iOS, and iPadOS allows attackers to disclose protected information.

The vulnerability of Photos storage in operating systems such as macOS, iOS, and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability in the Networking component of operating systems macOS, iOS, and iPadOS allows attackers to disclose sensitive information that is protected by these systems.

The vulnerability of the Networking component in operating systems such as macOS, iOS, and iPadOS is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...

CVE-2024-23212

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, watchOS 10.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-23206

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user...

CVE-2023-42888

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS Monterey 12.7.3, iOS 17.2 and iPadOS 17.2. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2023-42888

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS Monterey 12.7.3, iOS 17.2 and iPadOS 17.2. Processing a maliciously crafted image may result in disclosure of process memory...

Code injection

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS Monterey 12.7.3, iOS 17.2 and iPadOS 17.2. An app may be able to access sensitive user data...

CVE-2024-23215

An issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to access user-sensitive data...

CVE-2024-23211

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A user's private browsing activity may be visible in Settings...

CVE-2023-40528

This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6.4. An app may be able to bypass Privacy preferences...

Xen Code Issues Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that...

The vulnerability of the Photos component in iOS, macOS, and iPadOS operating systems allows a hacker to view “Hidden Photos” in the album.

The vulnerability of the Photos component in iOS, macOS, and iPadOS operating systems is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to view “Hidden Photos” in the album...

The vulnerability of the Pro Res component in iOS, macOS, and iPadOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Pro Res component in iOS, macOS, and iPadOS operating systems is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...