Lucene search
K

803 matches found

CNVD
CNVD
added 2019/09/29 12:0 a.m.0 views

Apple Xcode ld64 Component Arbitrary Code Execution Vulnerability

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. An arbitrary code execution vulnerability exists in the ld64 component of Apple...

9.3CVSS8AI score0.00601EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.1 views

Apple Xcode otool component arbitrary code execution vulnerability

Apple Xcode is a set of Apple Apple Inc. to provide developers with an integrated development environment, which is mainly used for the development of Mac OS X and iOS applications. otool is one of the Mac OS X applications used in the decompilation tool. An arbitrary code execution vulnerability...

7.8CVSS7.8AI score0.00418EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.1 views

Apple Xcode ld64 component arbitrary code execution vulnerability (CNVD-2019-37184)

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. An arbitrary code execution vulnerability exists in the ld64 component of Apple...

9.3CVSS8AI score0.00601EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.1 views

Apple Xcode otool component arbitrary code execution vulnerability (CNVD-2019-37180)

Apple Xcode is a set of Apple Apple Inc. to provide developers with an integrated development environment, which is mainly used for the development of Mac OS X and iOS applications. otool is one of the Mac OS X applications used in the decompilation tool. An arbitrary code execution vulnerability...

7.8CVSS7.8AI score0.00418EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.1 views

Apple Xcode ld64 component arbitrary code execution vulnerability (CNVD-2019-37185)

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are used to develop applications for Mac OS X and iOS. ld64 is one of the Apple toolchain linking programs. An arbitrary code execution vulnerability exists in the ld64 component of Apple...

9.3CVSS8AI score0.00601EPSS
Exploits0References1
Apple
Apple
added 2019/09/26 6:15 a.m.42 views

About the security content of Xcode 11.0 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS1.3AI score0.16241EPSS
Exploits0Affected Software2
0day.today
0day.today
added 2019/09/21 12:0 a.m.40 views

macOS 18.7.0 Kernel - Local Privilege Escalation Exploit

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...

0.2AI score
Exploits0
Apple
Apple
added 2019/09/20 12:0 a.m.29 views

About the security content of Xcode 11.0

About the security content of Xcode 11.0 This document describes the security content of Xcode 11.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS0.8AI score0.16241EPSS
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2019/09/19 12:0 a.m.261 views

macOS 18.7.0 Kernel - Local Privilege Escalation

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2019/09/19 12:0 a.m.23 views

macOS 18.7.0 Kernel - Local Privilege Escalation

macOS 18.7.0 Kernel - Local Privilege Escalation macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild...

0.6AI score
Exploits0
GithubExploit
GithubExploit
added 2019/09/17 5:59 p.m.118 views

Exploit for Out-of-bounds Write in Apple Mac_Os_X

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR...

9.3CVSS6.3AI score0.15354EPSS
Exploits1
Talos
Talos
added 2019/05/16 12:0 a.m.137 views

Wacom update helper tool startProcess privilege escalation vulnerability

Summary An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to...

7.8CVSS8AI score0.00135EPSS
Exploits0
Talos
Talos
added 2019/05/16 12:0 a.m.183 views

Wacom update helper tool start/stopLaunchDProcess privilege escalation vulnerability

Summary An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. The command takes a user-supplied string argument and executes launchctl under root context. A user with local access can use this...

7.8CVSS7.5AI score0.00135EPSS
Exploits0
CNVD
CNVD
added 2019/04/08 12:0 a.m.1 views

Apple Xcode LLVM Component Memory Corruption Vulnerability

Apple Xcode is the United States Apple Apple company's set of integrated development environment for developers, it is mainly used for the development of Mac OS X and iOS applications. LLVM Low Level Virtual Machine is a set of LLVM team developed a framework for framing the compiler compiler...

9.3CVSS7.4AI score0.00171EPSS
Exploits0References1
NVD
NVD
added 2019/04/03 6:29 p.m.10 views

CVE-2018-4357

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10...

9.3CVSS7.3AI score0.00171EPSS
Exploits0References1
OSV
OSV
added 2019/04/03 6:29 p.m.1 views

CVE-2018-4357

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10...

7.8CVSS5.8AI score0.00171EPSS
Exploits0References1
Prion
Prion
added 2019/04/03 6:29 p.m.17 views

Memory corruption

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10...

9.3CVSS7.1AI score0.00171EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/04/03 5:43 p.m.16 views

CVE-2018-4357

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10...

7.3AI score0.00171EPSS
Exploits0References1
CVE
CVE
added 2019/04/03 5:43 p.m.77 views

CVE-2018-4357

CVE-2018-4357 is an Apple Xcode/LLVM memory corruption vulnerability: the LLVM/ Xcode component prior to Xcode 10 contains a flaw that allows memory corruption due to insufficient input validation. The issue could enable code execution with kernel privileges, as described in the Xcode 10 security...

9.3CVSS7.2AI score0.00171EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2019/03/27 12:0 a.m.24 views

Apple Xcode Arbitrary Code Execution Vulnerability (HT209606)

Apple Xcode is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode";...

9.3CVSS8.2AI score0.00175EPSS
Exploits0References1
Rows per page
Query Builder