Vulnerability of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are caused by a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code upon processing malicious web content...

The vulnerability of the HTTP Protocol Stack of Microsoft Windows operating systems arises from the possibility of operations going beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HTTP Protocol Stack in Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerability of operating systems tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser, related to type confusion errors, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are related to type confusion errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code during the processing of malicious web content...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows AppContracts API Server with privilege license and access control issues. The following products and editions are affected:Windows 10 Version...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

Domain Escalation – sAMAccountName Spoofing

Computer accounts have the $ sign appended at the end of their names in contrast with standard user accounts. By default Microsoft operating systems lack… Continue reading - Domain Escalation - sAMAccountName Spoofing...

The vulnerability of the GDI+ graphic library in Microsoft Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the GDI+ graphics library in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

vulhub

This is an open-source collection of vulnerable systems and applications for educational purposes. The repository is maintained by phith0n and is available on GitHub. It contains a variety of vulnerable systems and applications, including web applications, databases, and operating systems. The...

vulhub

This is an open-source collection of vulnerable web applications and environments for security research and training. It is a repository of vulnerable systems, including web applications, databases, and other software, designed to help security professionals and researchers practice and improve...

The vulnerability of the P2MP communication technology’s implementation in Junos operating systems and Junos OS Evolved allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the P2MP communication technology in Junos operating systems and Junos OS Evolved lies in buffer out-of-buffer writing. Exploiting this vulnerability can allow a malicious actor to cause an application to terminate abnormally due to a failure in the RPD process...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability of the kernel in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability in the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the MobileInstallation component in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MobileInstallation component in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in system boundary enforcement. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Tailspin component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to increase their privileges.

The vulnerability of the Tailspin component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

IBM i Buffer Overflow Vulnerability

IBM i is a set of operating systems from IBM USA running in IBM Power Systems and IBM PureSystems. IBM i has a buffer error vulnerability that stems from incorrect software boundary checking, making the software vulnerable to stack-based buffer overflow attacks, which could be exploited by a loca...

The vulnerability of the AudioToolboxCore component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AudioToolboxCore component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to the operation of processing AAC files where data may be written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari on iOS, iPadOS, tvOS, watchOS, and macOS lies in type conversion errors, allowing attackers to execute arbitrary code.

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari operating systems—iOS, iPadOS, tvOS, watchOS, and macOS—is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Spoofing

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

Vulnerability of operating systems iOS, macOS, iPadOS, watchOS, and tvOS, caused by a logical error during authentication procedures, allowing attackers to trigger a service denial

The vulnerability of operating systems such as iOS, macOS, iPadOS, watchOS, and tvOS arises due to a logical error during the authentication process. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...