macos Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/macos/ Sun, 26 Feb 2023 06:35:06 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png macos Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/macos/ 32 32 CVE-2019-9847 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9847/ Sun, 26 Feb 2023 06:35:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9847/ A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable on the target users file system. If the hyperlink is activated by the victim the executable target is unconditionally launched. Under Windows and macOS when processing a hyperlink target explicitly activated by the user […]

The post CVE-2019-9847 appeared first on CVE Vulnerability.

]]> A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable on the target users file system. If the hyperlink is activated by the victim the executable target is unconditionally launched. Under Windows and macOS when processing a hyperlink target explicitly activated by the user there was no judgment made on whether the target was an executable file, so such executable targets were launched unconditionally. This issue affects: All LibreOffice Windows and macOS versions prior to 6.1.6; LibreOffice Windows and macOS versions in the 6.2 series prior to 6.2.3.

The post CVE-2019-9847 appeared first on CVE Vulnerability.

]]> CVE-2019-9815 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9815/ Sun, 26 Feb 2023 06:35:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9815/ If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need […]

The post CVE-2019-9815 appeared first on CVE Vulnerability.

]]> If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main thread and any worker threads. *Note: users need to update to macOS 10.14.5 in order to take advantage of this change.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

The post CVE-2019-9815 appeared first on CVE Vulnerability.

]]> CVE-2019-8342 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8342/ Sun, 26 Feb 2023 06:34:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8342/ A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.

The post CVE-2019-8342 appeared first on CVE Vulnerability.

]]> A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.

The post CVE-2019-8342 appeared first on CVE Vulnerability.

]]> CVE-2019-8241 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8241/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8241/ Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8241 appeared first on CVE Vulnerability.

]]> Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8241 appeared first on CVE Vulnerability.

]]> CVE-2019-8242 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8242/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8242/ Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8242 appeared first on CVE Vulnerability.

]]> Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8242 appeared first on CVE Vulnerability.

]]> CVE-2019-8249 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8249/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8249/ Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

The post CVE-2019-8249 appeared first on CVE Vulnerability.

]]> Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

The post CVE-2019-8249 appeared first on CVE Vulnerability.

]]> CVE-2019-8250 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8250/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8250/ Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

The post CVE-2019-8250 appeared first on CVE Vulnerability.

]]> Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

The post CVE-2019-8250 appeared first on CVE Vulnerability.

]]> CVE-2019-8251 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8251/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8251/ Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8251 appeared first on CVE Vulnerability.

]]> Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8251 appeared first on CVE Vulnerability.

]]> CVE-2019-8252 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8252/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8252/ Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8252 appeared first on CVE Vulnerability.

]]> Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.

The post CVE-2019-8252 appeared first on CVE Vulnerability.

]]> CVE-2019-8253 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-8253/ Sun, 26 Feb 2023 06:34:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-8253/ Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

The post CVE-2019-8253 appeared first on CVE Vulnerability.

]]> Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

The post CVE-2019-8253 appeared first on CVE Vulnerability.

]]>