2025年1月28日星期二

Apple Products Multiple Vulnerabilities

Apple Products Multiple Vulnerabilities

Release Date: 28 Jan 2025

RISK: High Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, sensitive information disclosure, spoofing and data manipulation on the targeted system.

 

Note:

CVE-2025-24085 is actively exploited in the wild. Attacker can exploit this vulnerability to achieve elevation of privilege through a use after free issue in memory management. 

Impact

  • Denial of Service
  • Elevation of Privilege
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure
  • Spoofing
  • Data Manipulation

System / Technologies affected

  • Versions prior to macOS Sequoia 15.3
  • Versions prior to macOS Sonoma 14.7.3
  • Versions prior to macOS Ventura 13.7.3
  • Versions prior to iPadOS 17.7.4
  • Versions prior to iOS 18.3 and iPadOS 18.3
  • Versions prior to tvOS 18.3
  • Versions prior to visionOS 2.3
  • Versions prior to Safari 18.3
  • Versions prior to watchOS 11.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

  • macOS Sequoia 15.3
  • macOS Sonoma 14.7.3
  • macOS Ventura 13.7.3
  • iPadOS 17.7.4
  • iOS 18.3 and iPadOS 18.3
  • tvOS 18.3
  • visionOS 2.3
  • Safari 18.3
  • watchOS 11.3

Vulnerability Identifier

Source

Related Link

於

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

惡意軟件警報 - 零售商成為 Scattered Spider 黑客組織勒索軟件攻擊的目標

惡意軟件警報 - 零售商成為 Scattered Spider 黑客組織勒索軟件攻擊的目標 發佈日期: 2025年05月02日 類別: ...

  • Ubuntu Linux 核心多個漏洞
    Ubuntu Linux 核心多個漏洞 發佈日期: 2025年03月03日 風險: 中度風險 類型: 操作系統 - LINUX 於 Ubuntu...
  • Debian Linux 內核多個漏洞
    Debian Linux 內核多個漏洞 發佈日期: 2025年04月14日 風險: 中度風險 類型: 操作系統 - LINUX 於 Debian...