About the security content of iCloud for Windows 10.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of iCloud for Windows 10.4

About the security content of iCloud for Windows 10.4 This document describes the security content of iCloud for Windows 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Safari Webkit Proxy Object Type Confusion Exploit

This Metasploit module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the...

Safari Webkit Proxy Object Type Confusion

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Safari Webkit Proxy Object Type Confusion', 'Description' = %q This module exploits a type confusion bug in the Javascript Proxy object in WebKit...

About the security content of Safari 12.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

macOS : Apple Safari < 12.1.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.1 It is, therefore, affected by multiple vulnerabilities. - Multiple out-of-bound errors exist in WebKit, due to improper memory handling. An unauthenticated, remote attacker can exploit this, via speciall...

About the security content of iTunes for Windows 12.9.5

About the security content of iTunes for Windows 12.9.5 This document describes the security content of iTunes for Windows 12.9.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

KLA11489 Multiple vulnerabilities in iTunes

Multiple vulnerabilities were found in iTunes. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...

About the security content of iCloud for Windows 7.12

About the security content of iCloud for Windows 7.12 This document describes the security content of iCloud for Windows 7.12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

KLA11490 Multiple vulnerabilities in iCloud

Multiple vulnerabilities were found in iCloud. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...

Fedora Update for webkit2gtk3 FEDORA-2019-f18fb0f37d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...

CVE-2019-8595

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

PT-2019-2328

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.3 Apple macOS versions prior to 10.14.5 Apple tvOS versions prior to 12.3 Apple Safari versions prior to 12.1.1 Apple iTunes for Windows versions prior to 12.9.5 Apple iCloud for Windows versions prior to 7.12...

PT-2019-2330

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.3 Apple macOS versions prior to 10.14.5 Apple tvOS versions prior to 12.3 Apple Safari versions prior to 12.1.1 Apple iTunes for Windows versions prior to 12.9.5 Apple iCloud for Windows versions prior to 7.12...

RHEL 6 : chromium-browser (RHSA-2019:1243)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1243 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 74.0.3729.131. Security Fixes:...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Apple Patches Intel Side-Channel Bugs; Updates iOS, macOS and More

Apple has rolled out 173 patches across in various products across its hardware portfolio, including for dangerous bugs in macOS for laptops and desktops, iPhone, Apple TV and Apple Watch. The update also includes a patch for the side-channel vulnerabilities in Intel chips disclosed on Tuesday,...

Multiple Apple Products WebKit Component Buffer Overflow Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer overflow...

Multiple Apple Products WebKit Component Out-of-Bounds Read Vulnerability (CNVD-2019-16414)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. An out-of-bounds read...