>> TAG: #osx

Apple Security Advisory 2017-07-19-7 – iCloud for Windows 6.2.2 is now available and addresses information disclosure, code execution, and various other vulnerabilities.

Apple Security Advisory 2017-07-19-1 – iOS 10.3.3 is now available and addresses code execution, memory corruption, and various other vulnerabilities.

Apple Security Advisory 2017-07-19-3 – watchOS 3.2.2 is now available and addresses buffer overflow, memory corruption, and various other vulnerabilities.

Apple Security Advisory 2017-07-19-2 – macOS 10.12.6 is now available and addresses code execution, memory corruption, and various other vulnerabilities.

Apple Security Advisory 2017-07-19-4 – tvOS 10.2.2 is now available and addresses code execution, memory corruption, and various other vulnerabilities.

Apple MacOS disk arbitration daemon race condition exploit.

Apple Safari version 10.1 suffers from a spread operator integer overflow vulnerability.

Parallels Desktop version 12.2.0 and below suffer from a vulnerability that allows remote file sharing to be leveraged against the host operating system for arbitrary code execution.

Apple iOS / MacOS suffer from a kernel use-after-free vulnerability due to bad locking in unix domain socket file descriptor externalization.

Apple iOS / MacOS suffers from a kernel memory disclosure vulnerability due to lack of bounds checking in netagent socket option handling.