The Apple Intel GPU driver suffers from use-after-free and double-delete issues due to bad locking.
b351e27cbcb6569d7e176048b1d1639fiOS and macOS suffer from a sandbox escape vulnerability due to failure to comply with MIG object lifetime semantics in the iohideventsystem_client subsystem.
b9de50e80a2ea80f7f9468bd16b597e3Apple Security Advisory 2018-10-08-2 - iCloud for Windows 7.7 is now available and addresses code execution vulnerabilities.
6ea4e06a91c7ab3be1a284ea0c10eab3Apple Security Advisory 2018-10-08-1 - iOS 12.0.1 is now available and addresses lock screen issues.
7973fb64f647f02a30d5b632ad7521b0Apple Security Advisory 2018-9-24-6 - APPLE-SA-2018-9-24-6 provides additional information for APPLE-SA-2018-9-17-3. tvOS 12 is now available and addresses interception issues.
63881d3a4d4c027baf25d1fad1e1fa46Apple Security Advisory 2018-9-24-5 - APPLE-SA-2018-9-24-5 provides additional information for APPLE-SA-2018-9-17-2. watchOS 5 is now available and addresses validation issues.
75b0e0af4b93a8e32104bc2e1997bce2Apple Security Advisory 2018-9-24-4 - APPLE-SA-2018-9-24-4 provides additional information for APPLE-SA-2018-9-17-1. iOS 12 is now available and addresses memory corruption and input validation vulnerabilities.
be61103916d6a6155c475e643895c9b9Apple Security Advisory 2018-9-24-3 - APPLE-SA-2018-9-24-3 provides dditional information for APPLE-SA-2018-9-17-4. Safari 12 is now available and addresses browser history deletion and user interface spoofing vulnerabilities.
be699c74c6ab474dce54ff14a2997b25Apple Security Advisory 2018-9-24-2 - iTunes 12.9 for Windows addresses code execution and memory corruption vulnerabilities.
e60ee5bf120f5fe1b7c16631dd116fd8Apple Security Advisory 2018-9-24-1 - macOS Mojave 10.14 is now available and addresses memory corruption and input validation vulnerabilities.
cd3a6e91a2edd565d13e8389dc354bc7Apple Security Advisory 2018-9-17-3 - tvOS 12 is now available and addresses interception issues.
d364030cc534c515c923cb61691877bdApple Security Advisory 2018-9-17-2 - watchOS 5 is now available and addresses validation issues.
d702cb01c2da6754e7797fdd422d3932Apple Security Advisory 2018-9-17-5 - Apple Support 2.4 for iOS is now available and addresses a data interception issue.
a7441db84a7a0503a585f77069e82c01Apple Security Advisory 2018-9-17-4 - Safari 12 is now available and addresses browser history deletion and user interface spoofing vulnerabilities.
a568d7158566c7148b8c1fa79bd1a522Apple Security Advisory 2018-9-17-1 - iOS 12 is now available and addresses memory corruption and input validation vulnerabilities.
94c7b08f05542c1e82ef6e458f60b472Apple macOS version 10.13.4 denial of service proof of concept exploit.
f9d722bc33105c54d838ac1ddb2f7b4fSymantec Mobile Encryption for iPhone version 2.1.0 suffers from a denial of service vulnerability.
6cf7d1140119671e5354057be1a35099Apple Security Advisory 2018-7-23-5 - watchOS 4.3.1 addresses buffer overflow, code execution, and denial of service vulnerabilities.
ae4c2d9cc07306103652e9ae805cf2a9Apple Security Advisory 2018-7-23-3 - iOS 11.4 addresses buffer overflow, code execution, and denial of service vulnerabilities.
8427cf26d14947f142aa0d01ecf6404aApple Security Advisory 2018-7-23-4 - tvOS 11.4 addresses buffer overflow, code execution, and denial of service vulnerabilities.
f9796698ca5b3182336a9da609ad4e31Apple Security Advisory 2018-7-23-2 - 2018-003 Sierra, Security Update 2018-003 El Capitan addresses buffer overflow, code execution, denial of service, and information leakage vulnerabilities.
9830b2d9ede1a49ea6d6942b0cb9f042Apple Security Advisory 2018-7-23-1 - Security Update 2018-004 El Capitan addresses information leakage vulnerabilities.
8627424be62a9e99769b5934ed70de82Secunia Research has discovered multiple vulnerabilities in LibRaw, which can be exploited by malicious people to cause a DoS (Denial of Service). An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file. An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) can be exploited to trigger a division by zero via specially crafted NOKIARAW file. The vulnerabilities are confirmed in version 0.18.11. Prior versions may also be affected.
6e78f4b1fcbe43e3fe25052ffe74b0e0Apple Security Advisory 2018-7-9-7 - iTunes 12.8 for Windows is now available and addresses code execution and denial of service vulnerabilities.
9e83c0fa16aae3947b576f731b2fecceApple Security Advisory 2018-7-9-6 - iCloud for Windows 7.6 is now available and addresses code execution and denial of service vulnerabilities.
4c7a8cb8cdb7a8d92fd35e21b2ad8e8e
© 2018 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed