Tracked app vulnerabilities

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3…

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.

A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS …

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2. A user in a privileged netw…

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML docume…

Remote Desktop Client Remote Code Execution Vulnerability

Windows Core Messaging Elevation of Privileges Vulnerability

Windows Server Elevation of Privilege Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is…

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Microsoft Windows File Explorer Spoofing Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Windows Domain Name Service Remote Code Execution Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows USB Video Class System Driver Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows exFAT File System Remote Code Execution Vulnerability

Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown…

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested emai…

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be ab…