June 8, 2021-KB4601554 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, Windows Server, version 20H2, and Windows Server 21H1

None None...

May 20, 2021—KB5003212 (OS Build 18363.1593) Preview

None None...

May 20, 2021—KB5003217 (OS Build 17763.1971) Preview

None None...

Mercedes-Benz AG MBUX Infotainment System 安全漏洞

Mercedes-Benz AG MBUX Infotainment System is an application of Mercedes-Benz AG, USA. A user experience infotainment system that can be controlled by voice and touch input. A security vulnerability exists in Mercedes-Benz AG MBUX Infotainment System. A remote attacker could execute code via the...

May 11, 2021-KB5001842 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, where a malicious application may be able to determine the kernel memory layout. The following products and versions are affected: iPhone 6s and later, iPad Pro all models,...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple Inc. in the United States. A security vulnerability exists in the Apple Kernel that stems from an out-of-bounds read issue. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later,...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, where a local user may be able to create or modify privileged files. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 an...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple, Inc. A security vulnerability exists in Apple Kernel, which is caused by an input out-of-bounds. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad 5th generation and...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which is caused by an obscure password in a screenshot. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad...

Apple iOS 资源管理错误漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which could allow an attacker executing JavaScript to execute arbitrary code. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad...

Apple Safari 输入验证错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari, which can be exploited by local users to write arbitrary files. The following products and versions are affected: iPhon...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple Inc. in the United States. A security vulnerability exists in Apple Kernel, which can be exploited by malicious applications to execute arbitrary code using kernel privileges. The following products and versions are affected: iPhone 6s a...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, which stems from the ability of traditional cellular networks to automatically answer incoming calls when a call ends or is disconnected. The following products and versions...

Apple Kernel 安全漏洞

The Apple Kernel is the kernel for Apple devices from Apple, Inc. A security vulnerability exists in the Apple Kernel, which originates in state management. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad 5th generation and...

The vulnerability of the Zero Touch Provisioning (ZTP) service for managing VoIP devices in the software-based IP telephones of Poly VVX, CCX, and Trio allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Zero Touch Provisioning ZTP service for VoIP device management in the software-based IP telephones of Poly VVX, CCX, and Trio is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access...

GHSA-VM67-7VMG-66VM Arbitrary Command Injection in portprocesses

Impact An Arbitrary Command Injection vulnerability was reported in portprocesses impacting versions = 1.0.4. Example Proof of Concept The following example demonstrates the vulnerability and will run touch success therefore creating a file named success. js const portprocesses =...

The vulnerability in the implementation of the fts_driver_test_write function in fts_proc.c of the Touch component of Android kernel allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the implementation of the ftsdrivertestwrite function in the ftsproc.c file of the Touch component in Android operating systems involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

The vulnerability in the implementation of the fts_driver_test_write function in the Touch component of Android operating systems allows a malicious actor to escalate their privileges.

The vulnerability of the ftsdrivertestwrite function implementation in the Touch component of Android operating systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability in the implementation of the fts_driver_test_write function in the Touch component of Android operating systems allows a malicious actor to escalate their privileges.

The vulnerability of the ftsdrivertestwrite function implementation in the Touch component of Android operating systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...