Apple Security Advisory 2022-05-16-1 - iOS 15.5 and iPadOS 15.5 addresses bypass, code execution, denial of service, integer overflow, out of bounds access, out of bounds write, and use-after-free vulnerabilities.
dde1d552c35f2995a88956c43d2ed8e85b607bc8d90f69562c2416a22d95e796This is a research paper titled Goodbye Tracking? Impact Of iOS App Tracking Transparency And Privacy Labels. It analyzes 1,759 iOS apps before and after the changes in iOS 14.
f2c94b3fe30d62f6090a9abdcdc56152591090977c196e48ef151cadea9e410aApple Security Advisory 2022-03-31-1 - iOS 15.4.1 and iPadOS 15.4.1 addresses code execution and out of bounds write vulnerabilities.
9ae2b5da95ff8d6c0595615ff2b6d1a454d32e644c97de390b1ff0e6119d7c85Foxit PDF Editor (iOS) version 11.3.1 suffers from an arbitrary file upload vulnerability.
eee6585def5e7c7d4e32865c6af95620ceb8365f388cac02687c0e833289acfaThe 3CX Client for Windows (legacy), Android, and iOS fails to properly validate TLS certificates.
074017ebf0abca4d37a8b67b240f167c0bec4bbfda44f67fe65cc2c9c71455a1Apple Security Advisory 2022-03-14-1 - iOS 15.4 and iPadOS 15.4 addresses buffer overflow, bypass, code execution, denial of service, null pointer, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
ced4eba6bddb15d34b4e77182ed4c0af3a79eaaf76f437dbfed78c8a915de3eaApple Security Advisory 2022-02-10-1 - iOS 15.3.1 and iPadOS 15.3.1 addresses code execution and use-after-free vulnerabilities.
ffb44aa673eb6c378b3be0dc9f7e1c638db809cb42bdd28efcb80d8ac8a39680Apple Security Advisory 2022-01-26-1 - iOS 15.3 and iPadOS 15.3 addresses buffer overflow, code execution, information leakage, path sanitization, and use-after-free vulnerabilities.
28c6a19af86c915e22c2c56dbdf1e9006b2dac52398c520d34ac14568e27f88bBanco Guayaquil for iOS version 8.0.0 suffers from a script insertion vulnerability where a user can insert malicious code into their own name and could possibly be leveraged for attacks upstream. The security team for Banco Guayaquil contacted Packet Storm on 2022/02/08 to note that the issue has been addressed in new versions of the application.
67fd258d29a5a1f1144f15f1e4bbb69c7f2cb5738a374217e2ed9411f811c80eApple Security Advisory 2022-01-12-1 - iOS 15.2.1 and iPadOS 15.2.1 addresses denial of service and resource exhaustion vulnerabilities.
2c440c3c12aa9debdf11c46ca81161fc2f64ca377b0357f0240fdb1a34ba76deApple Security Advisory 2021-12-15-1 - iOS 15.2 and iPadOS 15.2 addresses buffer overflow, bypass, code execution, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
6c38fa3489f9bbd4ca8ebf0319e37798e0be437a126d76e4a131f8a53307d3ccIonic Identity Vault versions 5.0.4 and below suffer from a PIN unlock lockout bypass vulnerability on both Android and iOS.
6d043256140f16431c0ba31a27b2ed7b96bda2ffd3eebc36d63d48a045405df3Apple Security Advisory 2021-10-26-9 - iOS 15 and iPadOS 15 addresses code execution, denial of service, out of bounds read, spoofing, and use-after-free vulnerabilities.
58d06760b57771902a8c3f6b64d1ccec806b30ce2ef20836de59cb0ce4327904Apple Security Advisory 2021-10-26-2 - iOS 14.8.1 and iPadOS 14.8.1 addresses code execution, information leakage, integer overflow, out of bounds write, and use-after-free vulnerabilities.
32f0d53da1c6e18f84f3809f3f0db412865c56195212f6b16ed093f9f2c80ce4Apple Security Advisory 2021-10-26-1 - iOS 15.1 and iPadOS 15.1 addresses buffer overflow, code execution, cross site scripting, information leakage, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
8c0084627e532d74b7581ebd43f9cc9effc225f3b239aed3e5e450e94048cdf7Apple Security Advisory 2021-10-11-1 - iOS 15.0.2 and iPadOS 15.0.2 address a code execution vulnerability.
9cba504156a47f191cbd327339a1bcfe0c4fafa4f7d0f155dc41f5861146870eZero day exploit for Nehelper Wifi Info on iOS 15.0. XPC endpoint com.apple.nehelper accepts user-supplied parameter sdk-version, and if its value is less than or equal to 524288, the com.apple.developer.networking.wifi-info entitlement check is skipped. This makes it possible for any qualifying application (e.g. possessing location access authorization) to gain access to Wifi information without the required entitlement. This happens in -[NEHelperWiFiInfoManager checkIfEntitled:] in /usr/libexec/nehelper.
0af5f880ff757d8f4ecf82631a976eb88cd98d6646578d823eeb66b9199ddf29Zero day exploit for nehelper on iOS 15.0 that allows any user-installed application to determine whether any application is installed on the device given its bundle ID.
375980bf93ee070923c3bb357ef6f80b43ca064d6099d8de7d730edb2ea93c70Zero day exploit for Gamed on iOS 15.0 that demonstrates information disclosure vulnerabilities.
064f75f646068bb009495ba2efc5724b31cd4cd7265da1713630bea9d23cab50Apple Security Advisory 2021-09-23-1 - iOS 12.5.5 addresses code execution, integer overflow, and use-after-free vulnerabilities.
beac8839ec4a337a5772b10bfb87dd0706785ded91d5f64cec923c300438f091Apple Security Advisory 2021-09-20-6 - iOS 14.8 and iPadOS 14.8 addresses code execution, denial of service, integer overflow, and use-after-free vulnerabilities.
b4bb452003d59697e054354295ed98806d13ed94329af6f68cfea0ee37b1afc6Apple Security Advisory 2021-09-20-1 - iOS 15 and iPadOS 15 addresses code execution, denial of service, out of bounds read, and spoofing vulnerabilities.
ca197fe83268b6c85bafa1f728899b30b12b55a6bc3ddb2113b0de274526853eApple Security Advisory 2021-09-13-1 - iOS 14.8 and iPadOS 14.8 addresses code execution, integer overflow, and use-after-free vulnerabilities.
de7bd7db1618b4858012fce5189898426da56726a221cdd0eb58135d5a0628e3Apple Security Advisory 2021-07-21-1 - iOS 14.7 and iPadOS 14.7 addresses buffer overflow, bypass, code execution, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
29358ea6cdd8675eaaf91eba676a9319ca50958300cb7768aafeb2307f7ade9aApple Security Advisory 2021-05-25-1 - iOS 14.6 and iPadOS 14.6 addresses buffer overflow, code execution, cross site scripting, denial of service, information leakage, null pointer, out of bounds read, and use-after-free vulnerabilities.
a1a282793028ec06e5f187d3b8d87c8c66f3eec9577f0d3ba5404d89d30ba9e0
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Subscribe to an RSS Feed