2392 matches found
Update now! Apple patches a raft of vulnerabilities
Apple has released security updates for its phones, iPads, Macs, watches and TVs. Updates are available for these products: iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th...
CVE-2023-42846
This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address...
PT-2023-28613 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17.1 Apple watchOS versions prior to 10.1 Apple macOS Sonoma versions prior to 14.1 Apple iOS versions prior to 17.1 Apple iPadOS versions prior to 17.1 Description: The issue allows an app to access sensitive use...
PT-2023-28607 · Apple · Macos Monterey +7
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.1 macOS Sonoma versions prior to 14.1 tvOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 macOS...
PT-2023-8360 · Apple · Macos Monterey +6
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 macOS Sonoma...
PT-2023-6493 · Apple · Macos Sonoma +7
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.1 iOS versions prior to 17.1 iOS versions prior to 16.7.2 iPadOS versions prior to 17.1 iPadOS versions prior to 16.7.2 watchOS versions prior to 10.1 tvOS versions prior to 17.1 macOS Sonoma versions prior to 14.1...
PT-2023-7179 · Apple · Ipados +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 Description: This issue is related to insufficient access control in the Siri persona...
PT-2023-27440 · Apple · Ipados +3
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 Description: An inconsistent user interface issue was addressed with improved...
The vulnerability of the Photos storage system in operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to gain access to photographs stored in the temporary catalog.
The vulnerability of Photos storage in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to photos stored in the temporary catalog...
The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS allows attackers to escalate their privileges.
The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS allows attackers to disclose sensitive information that should be protected.
The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...
The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS allows attackers to gain increased privileges.
The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.
The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The reality of Apple watch pen testing
Introduction We were approached to do an Apple Watch application test. It seems this isnt a service offered by many companies including us, although we’ve done plenty of work on Android Wear before but also, little information exists online about attempts, experiences or if it’s even possible. So...
SUSE CVE-2023-41074
The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...
The vulnerability of the TCC component in operating systems like watchOS and macOS allows a hacker to capture user screenshots.
The vulnerability of the TCC component in operating systems like watchOS and macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to capture user screens remotely...
Dark Web Pedophiles Using Open-Source AI to Generate CSAM
By Waqas This was revealed by the Internet Watch Foundation, a UK-based internet watchdog. This is a post from HackRead.com Read the original post: Dark Web Pedophiles Using Open-Source AI to Generate CSAM...
CVE-2023-40448
The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. A remote attacker may be able to break out of Web Content sandbox...
CVE-2023-40432
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...