L33D0Hyun

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Firefox ESR versions prior to 128.5 Firefox ESR versions prior to 115.18 Thunderbird versions prior to 133 Thunderbird versions prior to 128.5 Thunderbird versions prior to 115.18 Description: A flaw in Apple's GPU driver could have led to an out-of-bounds write and memory corruption due to certain WebGL operations on Apple silicon M series devices. This issue only affected applications on Apple M series hardware, with other platforms being unaffected. The vulnerability can be exploited by a remote attacker to execute arbitrary code. Recommendations: For Firefox versions prior to 133, update to version 133 or later. For Firefox ESR versions prior to 128.5, update to version 128.5 or later. For Firefox ESR versions prior to 115.18, update to version 115.18 or later. For Thunderbird versions prior to 133, update to version 133 or later. For Thunderbird versions prior to 128.5, update to version 128.5 or later. For Thunderbird versions prior to 115.18, update to version 115.18 or later. As a temporary workaround, consider disabling WebGL operations on Apple silicon M series devices until a patch is available.

A maliciously crafted email may be able to initiate FaceTime calls without user authorization. This issue can potentially lead to attacks resulting in user data leakage through FaceTime, as outgoing calls are not blocked in lock mode. A proof of concept (PoC) was developed and demonstrated, allowing for remote sound activation without clicking.

The issue is an out of bounds write vulnerability that allows local privileged attackers to execute arbitrary code.

The issue is an out-of-bounds write in SveService, allowing local privileged attackers to execute arbitrary code.

The issue is related to a buffer overflow in the ImageIO component of Apple operating systems, which can be exploited by a remote attacker using a specially crafted image file, potentially leading to arbitrary code execution. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

The issue is related to insufficient protection of internal data and may disclose sensitive information when processing web content. It can be exploited by a remote attacker to gain unauthorized access to protected information.

The issue is related to a buffer overflow in the handling of private shader memory on macOS, specifically due to lenient allocation checks in Angle for glsl shaders. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is known to affect Firefox on macOS, while other operating systems are unaffected.

A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. This issue is related to the WebKitGTK and WPE WebKit modules, which are used for displaying web pages. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

A remote user may be able to cause unexpected app termination or arbitrary code execution due to an issue that was addressed with improved state management.

The issue is related to dragging and dropping an image cross-origin, which could potentially leak the image's size. This behavior was introduced in version 109 and caused web compatibility problems, as well as security concerns. As a result, the behavior was disabled until further review. The vulnerability may allow a remote attacker to access confidential data by exploiting a security concern in the web browser's handling of cross-origin image dragging and dropping.

The issue is related to a logic problem that has been addressed with improved checks. Processing maliciously crafted web content may disclose sensitive user information.

The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. A remote attacker may exploit this to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. It is associated with a buffer overflow in the WPE WebKit and WebKitGTK modules, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of Oracle VM VirtualBox. This issue applies to Windows systems only.

The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions.

The issue allows attackers to execute arbitrary code through a DLL hijacking vulnerability.

This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within JavaScript optimizations due to an improper optimization, resulting in a type confusion condition. This can allow an attacker to execute code in the context of the current process. The vulnerability may also lead to potential out-of-bounds read, use-after-free, or uninitialized variable issues when handling certain JavaScripts, potentially allowing adversaries to disclose information.

This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the optimization of JavaScript functions due to the lack of validating the existence of an object prior to performing operations on it. An attacker can leverage this to execute code in the context of the current process. The vulnerability can also lead to an out-of-bounds read, type confusion, use-after-free, or uninitialized variable vulnerability and crash when handling certain JavaScripts, potentially allowing adversaries to disclose information or execute remote code.

This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the handling of arrays, specifically in JavaScript. An attacker can trigger a read past the end of an allocated object, potentially leveraging this in conjunction with other issues to execute arbitrary code in the context of the current process.