Hjy79425575

**Name of the Vulnerable Software and Affected Versions** Lenovo PC Manager versions prior to 2.8.90.11211 **Description** A vulnerability was reported that could allow a local attacker to escalate privileges. **Recommendations** For versions prior to 2.8.90.11211, update to version 2.8.90.11211 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 126.0.6478.54 Microsoft Edge (affected versions not specified) **Description** The issue is related to an inappropriate implementation in the Downloads component, which could allow a remote attacker to obfuscate security UI via a malicious file. This could potentially lead to the disclosure of protected information or cause a denial of service. The severity of this issue is classified as Medium by Chromium. **Recommendations** For Google Chrome versions prior to 126.0.6478.54, update to version 126.0.6478.54 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA nvJPEG2000 Library for Windows and Linux (affected versions not specified) **Description** The NVIDIA nvJPEG2000 Library contains a vulnerability due to improper input validation, which could allow an attacker to use a specially crafted input file. A successful exploit might lead to a partial denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 14.0 **Description** The issue may lead to disclosure of user information when parsing a file. It was addressed with improved checks. **Recommendations** For versions prior to 14.0, update to Xcode 14.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** NVIDIA CUDA Toolkit SDK (affected versions not specified) **Description** The issue is a stack-based buffer overflow in cuobjdump. An unprivileged remote attacker could exploit this condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally. This may lead to a limited denial of service and some loss of data integrity for the local user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Mac versions prior to 102.0.5005.61 Microsoft Edge (affected versions not specified) **Description** The issue is related to insufficient policy enforcement in the Safe Browsing service, which can be exploited by a remote attacker to bypass downloads protection policy. This can be achieved through a specially crafted HTML page, potentially allowing the attacker to disclose protected information. **Recommendations** For Google Chrome on Mac versions prior to 102.0.5005.61, update to version 102.0.5005.61 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue. As a temporary workaround, consider avoiding the use of potentially malicious files until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue. As a temporary workaround, consider avoiding the use of potentially malicious files until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue. As a temporary workaround, consider avoiding the use of maliciously crafted files until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 13.3 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file. **Recommendations** For versions prior to 13.3, update to Xcode 13.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15 iPadOS versions prior to 15 watchOS versions prior to 8 tvOS versions prior to 15 Mac OS (affected versions not specified) **Description** The issue is related to a memory corruption problem due to a buffer overflow in the ImageIO component. This can be exploited by processing a maliciously crafted image, potentially leading to arbitrary code execution in the target system. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For iOS versions prior to 15, update to iOS 15 or later. For iPadOS versions prior to 15, update to iPadOS 15 or later. For watchOS versions prior to 8, update to watchOS 8 or later. For tvOS versions prior to 15, update to tvOS 15 or later. For Mac OS, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15 iPadOS versions prior to 15 **Description** A local attacker may be able to cause unexpected application termination or arbitrary code execution due to an issue that was addressed with improved checks. **Recommendations** For iOS versions prior to 15, update to iOS 15 or later to resolve the issue. For iPadOS versions prior to 15, update to iPadOS 15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 Security Update 2021-007 Catalina **Description** An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1. For Catalina, apply Security Update 2021-007.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 macOS Catalina versions prior to Security Update 2021-007 **Description** An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1 to resolve the issue. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1 to resolve the issue. For macOS Catalina versions prior to Security Update 2021-007, apply Security Update 2021-007 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Big Sur 11.5 Security Update 2021-004 Catalina Security Update 2021-005 Mojave **Description** An information disclosure issue was addressed by removing the vulnerable code. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. **Recommendations** For macOS versions prior to Big Sur 11.5, update to macOS Big Sur 11.5. For Catalina, apply Security Update 2021-004. For Mojave, apply Security Update 2021-005.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 macOS Mojave versions prior to Security Update 2021-005 macOS Catalina versions prior to Security Update 2021-004 **Description** A stack overflow issue was addressed with improved input validation. Processing a maliciously crafted font file may lead to arbitrary code execution. **Recommendations** For iOS versions prior to 14.7, update to iOS 14.7 or later. For macOS Big Sur versions prior to 11.5, update to macOS Big Sur 11.5 or later. For watchOS versions prior to 7.6, update to watchOS 7.6 or later. For tvOS versions prior to 14.7, update to tvOS 14.7 or later. For macOS Mojave versions prior to Security Update 2021-005, apply Security Update 2021-005 or later. For macOS Catalina versions prior to Security Update 2021-004, apply Security Update 2021-004 or later.