Do Son A security researcher has published details and proof-of-concept (PoC) code for a CVE-2024-27815 vulnerability in the XNU kernel
Apple
The flaw, tracked as CVE-2024-27793, was discovered by Willy R. Vasquez, a security researcher at The University of Texas at Austin.
Apple has sent warnings to a growing number of users, alerting them about highly sophisticated mercenary spyware attacks
Apple recently pushed out emergency patches to fix two "zero-day" vulnerabilities (CVE-2024-23225 and CVE-2024-23296) that are already under attack
The CVE-2024-23204 vulnerability existed in macOS and iOS devices running versions before macOS Sonoma 14.3, iOS 17.3, and iPadOS 17.3
A researcher has published a proof-of-concept (PoC) tool for a kernel vulnerability, CVE-2024-23208 remedied in iOS 17.3
PoC code has been released for iOS and macOS vulnerability, CVE-2023-41974, that can be chained to take full control of a mobile device
PoC code has been released for a zero-day iOS vulnerability (CVE-2023-32434) that can be chained to take full control of a mobile device.
In the ever-evolving landscape of cybersecurity, Apple has taken swift action against a zero-day security vulnerability
These patches have now been extended to iOS/iPadOS 16, with the latest iteration being iOS/iPadOS 16.7.1 (20H30).
The first zero-day (CVE-2023-42824) is a kernel vulnerability that allows local attackers to escalate privileges on unpatched devices.
CVE-2023-41993 provided the opening gambit, allowing RCE in Safari. CVE-2023-41991 facilitated the bypass of signature validation.
A severe 0-day vulnerability, affecting an array of older Apple devices, has forced the tech giant to go back in time, rolling out patches for gadgets
The vulnerabilities, tracked as CVE-2023-41064 and CVE-2023-41061, were found in the ImageIO and Wallet frameworks
Two of these vulnerabilities, pertaining to the Kernel and WebKit, were tracked under the codes CVE-2023-32434 and CVE-2023-32435
Microsoft's security division today unveiled the intricate details of the CVE-2023-32369 vulnerability, dubbed Migraine
CVE-2022-46718, a logic issue affecting Apple's iOS, enables unauthorized applications to access users' sensitive location information
The security researcher @LinusHenze unveiled a PoC exploit for the CVE-2023-28206 flaw, revealing an out-of-bounds memory move
CVE-2023-23529, the issue has been described by the tech giant as a type confusion issue in the WebKit browser engine
Tracked as CVE-2023-23504, the flaw concerns a heap underwrite vulnerability in the XNU kernel (OS used for a number of Apple products).
The PoC exploit targets CVE-2022-42864, a vulnerability that could allow a remote attacker to execute arbitrary code on the system
By persuading a victim to open a specially-crafted file, an attacker could exploit CVE-2022-40303 to execute arbitrary code on the system.