PT-2023-19012 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 tvOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey. An attacker could exploit the vulnerability to modify protected portions of the file system...

PT-2023-19016 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS versions prior to 12.6.4 Description: A logic issue was addressed with improved checks, which may have allowed an app to modify protected parts of the file system. Recommendations: For macOS versions prior t...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey. An attacker could exploit the vulnerability to modify protected portions of the file system...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS that originates from a user being able to access a...

The vulnerability of Google Chrome’s SwiftShader library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s SwiftShader library relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

The vulnerability of the Adobe Experience Manager content and media data management system lies in the use of a weak encryption mechanism, which allows attackers to disclose protected information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the use of a weak encryption mechanism. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading beyond the memory limit, allows attackers to exploit the protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the memory limit. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

The vulnerability of the Mozilla Firefox browser, related to errors in processing hypertext links, allows a hacker to convert a URL address into a local path and gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to errors in processing hypertext links. Exploiting this vulnerability allows an attacker to convert a URL address into a local path and gain unauthorized access to protected information...

Researchers Uncover Chinese Nation State Hackers' Deceptive Attack Strategies

A recent campaign undertaken by Earth Preta indicates that nation-state groups aligned with China are getting increasingly proficient at bypassing security solutions. The threat actor, active since at least 2012, is tracked by the broader cybersecurity community under Bronze President, HoneyMyte,...

The vulnerability of the EcoStruxure Power Monitoring Expert software lies in its incorrect session duration, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert software is related to incorrect session duration settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the client request handler of the secure access control system used in IED RUGGEDCOM CROSSBOW allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to deficiencies in access control, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information when a specially crafted document is opened in the browser...

The vulnerability of the Hyperkit virtualization software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Hyperkit virtualization software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the administration interface of the Fortinet FortiSOAR software for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the administration interface of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker,...

The vulnerability of the administration interface of FortiOS operating systems and the FortiProxy proxy server, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the administrative interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

Vulnerability of AMD microprocessor microprogramming software, allowing attackers to disclose protected information

The vulnerability of AMD’s microprogramming software is related to an incorrect prediction of the transition type. Exploiting this vulnerability allows attackers to disclose protected information...

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...