SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
Apple Security Updates – December 2018
CVE Research
Apple Security Updates – December 2018
Image Source: wikimedia.org Apple Security Updates December 2018 released a set of security updates for its products this month. There are ten products which received the updates including Apple’s new brain child, MacOS Mojave which newly launched in September. This update addresses a set of 26 vuln
Apple Security Update: Keep Your Apple Mac Systems UpToDate
CVE Research
Apple Security Update: Keep Your Apple Mac Systems UpToDate
Apple has released a set of security updates for the second time this month. The updates include fixes for vulnerabilities in macOS, Safari, watchOS, iOS, and tvOS. There are a total of 56 CVEs. However, these CVEs can be detected using a vulnerability scanning tool. 33 vulnerabilities were fixed in
Apple Security Updates – May 2017
CVE Research
Apple Security Updates – May 2017
Apple Security updates May 2017 fixed 141 vulnerabilities across multiple products including macOS Sierra, iOS, watchOS, tvOS, iCloud, Safari, and iTunes. However, most of the vulnerabilities exist in some instances with root privileges (41 in iOS 41, 37 in macOS Sierra, 23 in tvOS, and 12 in watchO
Apple Patches Another High Severity Zero-Day Flaw (CVE-2021-30807) Exploited in the Wild
CVE Research
Apple Patches Another High Severity Zero-Day Flaw (CVE-2021-30807) Exploited in the Wild
Apple Security Patches has released an urgent update to address a critical zero-day vulnerability that is being exploited in the wild. The vulnerability, tracked as CVE-2021-30807 and affects iOS, iPadOS, and macOS devices. This vulnerability exists due to a memory corruption issue in the IOMobileFr
Apple Patches Critical Zero-Day Vulnerabilities Actively Exploited in the Wild
CVE Research
Apple Patches Critical Zero-Day Vulnerabilities Actively Exploited in the Wild
Apple patches critical Zero-Day vulnerabilities on its various products in the latest May update. This release includes three critical zero-day security bugs which are being exploited in the wild. These vulnerabilities can be tracked as CVE-2021-30663, CVE-2021-30665, and CVE-2021-30713. Endpoints t
Apple Fixes Critical Zero-Day Flaws
CVE Research
Apple Fixes Critical Zero-Day Flaws
Apple released May 2021 zero-day exploit security updates for multiple products, including Safari, macOS, iOS, iPadOS, tvOS and watchOS. Apple Zero Day Exploit of some of these security flaws will allow an attacker to take control of the victim’s system and put Mac users at great risk. However, a vu
Apple Security Updates March 2020 and Adobe Creative Cloud Critical Security Update
CVE Research
Apple Security Updates March 2020 and Adobe Creative Cloud Critical Security Update
Apple finally released Security Updates in March 2020 for multiple products today. A total of 49 vulnerabilities were addressed. However, Exploiting some of these security flaws could allow an attacker to take control of an affected system. Hence, Vulnerability Management System is the solution to t
Internet Explorer/Edge XXE (XML External Entity) Zero-Day Vulnerability
CVE Research
Internet Explorer/Edge XXE (XML External Entity) Zero-Day Vulnerability
A Zero-day vulnerability is in discovery by Internet Explorer that can allow attackers to steal files from Windows systems. The vulnerability resides in how Internet Explorer processes MHT(MIME HTML web archive) files and can easily exploit them by tricking users into opening a specially crafted MHT
Adobe Releases Critical Security Updates June 2020
CVE Research
Adobe Releases Critical Security Updates June 2020
Adobe has released critical security updates to its products like Adobe After Effects, Illustrator 2020, Adobe Campaign Classic, and others in order to patch multiple critical vulnerabilities which can lead to arbitrary code execution and information disclosure. This month’s release consists of 19 v