Proteas

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.4 Security Update 2020-002 Mojave versions prior to the update Security Update 2020-002 High Sierra versions prior to the update Description: A use after free issue was addressed with improved memory management, allowing a malicious application to potentially execute arbitrary code with kernel privileges. Recommendations: For macOS versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For Security Update 2020-002 Mojave, apply the Security Update 2020-002. For Security Update 2020-002 High Sierra, apply the Security Update 2020-002.

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.2 Security Update 2021-001 Catalina Security Update 2021-001 Mojave watchOS versions prior to 7.3 tvOS versions prior to 14.4 iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: An out-of-bounds read issue was addressed with improved bounds checking, which may allow a local attacker to elevate their privileges. Recommendations: For macOS Big Sur, update to version 11.2 or later. For macOS Catalina, apply Security Update 2021-001. For macOS Mojave, apply Security Update 2021-001. For watchOS, update to version 7.3 or later. For tvOS, update to version 14.4 or later. For iOS, update to version 14.4 or later. For iPadOS, update to version 14.4 or later.

An out-of-bounds read issue was addressed with improved input validation, which may allow an application to execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved memory handling. A malicious application may be able to execute arbitrary code with system privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

The issue involves multiple memory corruption problems that have been resolved through enhanced state management. A malicious application could potentially execute arbitrary code with kernel privileges.

The issue involves multiple memory corruption problems that have been resolved through enhanced state management. A malicious application could potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges.

A race condition was addressed with improved locking, which may allow an application to execute arbitrary code with kernel privileges.

An out-of-bounds read issue existed, leading to the disclosure of kernel memory. This issue was addressed with improved input validation.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.1 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For versions prior to 10.14.1, update to macOS Mojave 10.14.1 or later to resolve the issue.

A memory initialization issue was addressed with improved memory handling. A malicious application may be able to break out of its sandbox.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is caused by a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page, allowing for remote code execution.

The issue involves the `FontParser` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted font file.

The issue involves the `IOHIDFamily` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in memory. Exploitation of the issue may allow an attacker to execute arbitrary code with kernel privileges or cause a denial of service using a specially crafted application.

The issue involves the Kernel component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app, resulting in memory corruption.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue is caused by a buffer overflow in the libarchive component, allowing remote attackers to cause a denial of service (memory corruption) or possibly have other unspecified impacts via a crafted file.

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4653.

The issue is caused by a buffer overflow in the AppleRAID component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This can be exploited by a remote attacker using a specially crafted application.