2025年1月28日星期二

Apple Products Multiple Vulnerabilities

Apple Products Multiple Vulnerabilities

Release Date: 28 Jan 2025

RISK: High Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, sensitive information disclosure, spoofing and data manipulation on the targeted system.

 

Note:

CVE-2025-24085 is actively exploited in the wild. Attacker can exploit this vulnerability to achieve elevation of privilege through a use after free issue in memory management. 

Impact

  • Denial of Service
  • Elevation of Privilege
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure
  • Spoofing
  • Data Manipulation

System / Technologies affected

  • Versions prior to macOS Sequoia 15.3
  • Versions prior to macOS Sonoma 14.7.3
  • Versions prior to macOS Ventura 13.7.3
  • Versions prior to iPadOS 17.7.4
  • Versions prior to iOS 18.3 and iPadOS 18.3
  • Versions prior to tvOS 18.3
  • Versions prior to visionOS 2.3
  • Versions prior to Safari 18.3
  • Versions prior to watchOS 11.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

  • macOS Sequoia 15.3
  • macOS Sonoma 14.7.3
  • macOS Ventura 13.7.3
  • iPadOS 17.7.4
  • iOS 18.3 and iPadOS 18.3
  • tvOS 18.3
  • visionOS 2.3
  • Safari 18.3
  • watchOS 11.3

Vulnerability Identifier

Source

Related Link

於

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

思科產品多個漏洞

思科產品多個漏洞 於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況，資料篡改及繞過保安限制。 影響 阻斷服務 繞過保安限制 篡改 受影響之系統或技術 Cisco IOS Cisco IOS XE 請參考供應商發佈的連結以了解受影響的版本： https:...