Apple MACOS

Untrusted Search Path in vim/vim

Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Photoshop MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-CAN-23106: Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Photoshop U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader | Out-of-bounds Read (CWE-125)

Adobe Illustrator Improper Input Validation Arbitrary code execution

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination.

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.

Heap-based Buffer Overflow in vim/vim

Acrobat Reader | Untrusted Search Path (CWE-426)

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability

After Effects | Stack-based Buffer Overflow (CWE-121)

Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)

Adobe Character Animator SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CoolType.dll crash - Tianfu Cup

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

Adobe Animate SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously crafted video file may lead to unexpected app termination.

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.

.NET Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Adobe Photoshop SVG file Use After Free Arbitrary code execution

ZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Premiere Pro Out-of-bounds Write Arbitrary code execution

Adobe Bridge SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.