Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Mikhail Vinogradov

Researcher fromKaspersky
#21845of 60,400
14.2Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2023-4047
2023-07-24
6.4
CVE-2023-38606
Apple
Ios
An issue exists where an app may be able to modify sensitive kernel state due to a memory out-of-bounds operation. The flaw involves the use of undocumented MMIO (Memory-Mapped I/O) registers in Apple SoCs, which allows attackers to bypass hardware security protections and manipulate protected kernel memory to gain full control of the device. This issue was part of a campaign known as Operation Triangulation, where attackers could deliver a malicious iMessage attachment to compromise a device without any user interaction. There are reports that this issue was actively exploited against iOS versions released before iOS 15.7.1.
PT-2023-5598
2023-01-23
7.8
CVE-2023-41990
Apple
Apple Macos
The issue is related to the processing of font files, which may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. The vulnerability is associated with a buffer overflow in the FontParser component of Apple's operating systems. It is estimated that a large number of devices may be affected, but the exact number is not specified. The issue was addressed with improved handling of caches.