Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7, which stems from an application that may be able to access sensitive user data...

CVE-2024-40842

An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-44182

CVE-2024-44182 (Apple macOS) describes a local vulnerability where an app may access sensitive data logged when a shortcut fails to launch another app. Remediation is to upgrade affected macOS releases to macOS Ventura 13.7, macOS Sonoma 14.7, or macOS Sequoia 15, where the issue has been address...

CVE-2024-44182

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive data logged when a shortcut fails to launch another app...

CVE-2024-40790

CVE-2024-40790 affects Apple visionOS 2. The vulnerability stems from cache handling allowing an app to read sensitive data from GPU memory. Apple’s documentation states this is fixed in visionOS 2; remediation is updating to visionOS 2. No exploitation details are provided in the supplied docume...

CVE-2024-40790

The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-44184

CVE-2024-44184 is a permissions-related issue in Apple platforms. The vulnerability could allow an app to access user-sensitive data. Fixes are provided in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15, and iOS/iPadOS 17.7 and 18. No exploit details are provided in the connected documen...

CVE-2024-40850

CVE-2024-40850 describes a file access issue corrected by improved input validation. The vulnerability affects multiple Apple platforms and versions, including macOS Ventura 13.7; iOS 17.7 and iPadOS 17.7; visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18 and iPadOS 18; macOS Sonoma 14.7; and tvOS...

CVE-2024-40847

CVE-2024-40847 affects macOS: fixed via added code-signing restrictions in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue could allow an app to access sensitive user data, addressed by the patch. Connected sources (NVD/Red Hat/NCSC/Nessus/OpenVAS) reiterate the same remedi...

CVE-2024-44131

CVE-2024-44131 concerns Apple’s FileProvider symlink handling. The issue arises from improper validation of symlinks, enabling a malicious app running with elevated file operation privileges to access or exfiltrate data via symlink manipulation. Apple states fixes are in iOS 18, iPadOS 18, and ma...

About the security content of macOS Sequoia 15

About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2024-29111 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13.7.1 macOS versions prior to Sonoma 14.7.1 macOS versions prior to Sequoia 15 Description: A sandboxed application may be able to access sensitive user data due to insufficient checks. Recommendations: Update...

Sandbox Bypass

twig/twig is vulnerable to Sandbox Bypass. The vulnerability is due to sandbox security checks not being enforced in certain situations, allowing an attacker to execute unauthorized code or access sensitive data via user-contributed templates...

CVE-2024-34648

Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data...

CVE-2024-34648

CVE-2024-34648 concerns Samsung KnoxMiscPolicy where improper handling of insufficient permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data. Affected component: KnoxMiscPolicy on Samsung mobile devices. Root cause: privilege insufficiency m...

PT-2024-28596 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon Booking System versions n/a through 10.7 Description: The issue is related to an SQL Injection problem caused by improper handling of special elements in an SQL command. This allows for SQL Injection attacks, which can potentially lead ...

ROS-20240826-23

A vulnerability in the Blender three-dimensional computer graphics software suite is related to the lack of validation for values less than 0. Exploitation of the vulnerability allows an attacker acting remotely to gain access to sensitive data, compromise its integrity, and cause a denial of...

Kashipara Music Management System SQL Injection Vulnerability (CNVD-2024-37436)

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the email parameter of /music/ajax.php?action=login against external SQL input, which c...