Apple Security Advisory 2021-10-11-1 - iOS 15.0.2 and iPadOS 15.0.2 address a code execution vulnerability.
9e6f048f643366aae176a51313727967Zero day exploit for Nehelper Wifi Info on iOS 15.0. XPC endpoint com.apple.nehelper accepts user-supplied parameter sdk-version, and if its value is less than or equal to 524288, the com.apple.developer.networking.wifi-info entitlement check is skipped. This makes it possible for any qualifying application (e.g. possessing location access authorization) to gain access to Wifi information without the required entitlement. This happens in -[NEHelperWiFiInfoManager checkIfEntitled:] in /usr/libexec/nehelper.
8e0fa4b843bff3eb37d125be61cefb65Zero day exploit for nehelper on iOS 15.0 that allows any user-installed application to determine whether any application is installed on the device given its bundle ID.
b12949ee6a8798fde4f715bd963ec313Zero day exploit for Gamed on iOS 15.0 that demonstrates information disclosure vulnerabilities.
fccf7e2b0e471a0f2129a9f0a9ffc40dApple Security Advisory 2021-09-23-1 - iOS 12.5.5 addresses code execution, integer overflow, and use-after-free vulnerabilities.
488d3765baad8c4d50fbe4155e799a1bApple Security Advisory 2021-09-20-6 - iOS 14.8 and iPadOS 14.8 addresses code execution, denial of service, integer overflow, and use-after-free vulnerabilities.
d0b20d27dd698353f67f5b99c5b4f169Apple Security Advisory 2021-09-20-1 - iOS 15 and iPadOS 15 addresses code execution, denial of service, out of bounds read, and spoofing vulnerabilities.
ac454972f8217c02f4766e3f06ec4ae6Apple Security Advisory 2021-09-13-1 - iOS 14.8 and iPadOS 14.8 addresses code execution, integer overflow, and use-after-free vulnerabilities.
2829cb226889d1f9130090e1982fb5e3Apple Security Advisory 2021-07-21-1 - iOS 14.7 and iPadOS 14.7 addresses buffer overflow, bypass, code execution, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
3f165f9bdbf5cb41d0388c12c327f95cApple Security Advisory 2021-05-25-1 - iOS 14.6 and iPadOS 14.6 addresses buffer overflow, code execution, cross site scripting, denial of service, information leakage, null pointer, out of bounds read, and use-after-free vulnerabilities.
ad3930f3a391477bc3455e19d4698cd0WebSSH for iOS version 14.16.10 suffers from a denial of service vulnerability.
96d5a3d99c9f2c80b466a1262bc3ad37Apple Security Advisory 2021-05-03-1 - iOS 14.5.1 and iPadOS 14.5.1 addresses code execution and integer overflow vulnerabilities.
a8a4944ad26eb954c1cb9c551ceb39d3Apple Security Advisory 2021-05-03-2 - iOS 12.5.3 addresses buffer overflow, code execution, integer overflow, and use-after-free vulnerabilities.
82523f50ed01be666ae29e54a3e854f7Whitepaper called Root Detection Bypass with frida-push and Objection for iOS and Android. Written in Turkish.
cf2857b86392f6fbfb8a1f549f8da9ecApple Security Advisory 2021-04-26-1 - iOS 14.5 and iPadOS 14.5 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
eb2388e66c9270c29f072d054510896aA radio proximity kernel memory corruption vulnerability exists in iOS and macOS due to bad state machine in BSS steering.
5ff730e5556e80e223e58b23eca60fa1Apple Security Advisory 2021-03-26-2 - iOS 12.5.2 addresses a cross site scripting vulnerability.
92e0cb5133e5e8ecb6931d5522ec5393Apple Security Advisory 2021-03-26-1 - iOS 14.4.2 and iPadOS 14.4.2 addresses a cross site scripting vulnerability.
a24404039fa9cf5fc55928412c9d7017Apple Security Advisory 2021-03-08-1 - iOS 14.4.1 and iPadOS 14.4.1 addresses a code execution vulnerability.
06c77493f484bf787aa128b7482af828The Canadian Internet Registration Authority (CIRA) Canadian Shield iOS application versions 4.0.12 and below do not validate the SSL certificate it receives when connecting to the application server.
bf1cf19e84f8affc4de78a67a8f1e677Apple Safari is susceptible to a remote code execution vulnerability via an undefined othersubr in Type 1 fonts handled by libType1Scaler.dylib on macOS and iOS.
46ada3aa4a5cf57b7f656c84696a56ccApple Security Advisory 2021-02-01-2 - iOS 14.4 and iPadOS 14.4 addresses buffer overflow, bypass, code execution, denial of service, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
5a08bcdee83129425fd6c1eb6b2dd555Apple Security Advisory 2021-01-26-1 - iOS 14.4 and iPadOS 14.4 address race condition and arbitrary code execution vulnerabilities.
9ea3bdc34259ca4f0ff33cda355065ebApple Security Advisory 2020-12-14-2 - iOS 12.5 addresses a code execution vulnerability.
fbf2576e6d5d22b3036b0586915e2dd4Apple Security Advisory 2020-12-14-1 - iOS 14.3 and iPadOS 14.3 addresses code execution, information leakage, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
806dfdd340bfdb087b03de6805c37b4c
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed