March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2023-26464 – Apache Log4j Vulnerability
March 12, 2023
Rewterz Threat Advisory – Multiple Solarwinds Products Vulnerabilities
March 13, 2023
Rewterz Threat Advisory – CVE-2023-26464 – Apache Log4j Vulnerability
March 12, 2023
Rewterz Threat Advisory – Multiple Solarwinds Products Vulnerabilities
March 13, 2023
Severity
High
Analysis Summary
CVE-2023-27938 CVSS:6.2
Apple GarageBand could allow a local attacker to obtain sensitive information, caused by an out-of-bounds when importing MIDI files. By using a specially crafted application, an attacker could exploit this vulnerability to leak sensitive user information.
CVE-2023-27960 CVSS:8.4
Apple GarageBand could allow a local attacker to gain elevated privileges on the system during the installation process. By using a specially crafted application, an attacker could exploit this vulnerability to gain elevated privileges on the system.
Impact
- Privilege Escalation
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2023-27938
- CVE-2023-27960
Affected Vendors
Apple
Affected Products
- Apple GarageBand 10.4.7
Remediation
Refer to Apple Security Document for patch, upgrade or suggested workaround information.