References https://support.apple.com/zh-cn/102789 https://support.apple.com/zh-cn/102846 https://support.apple.com/zh-cn/106365 https://support.apple.com/en-us/120334 https://support.apple.com/en-us/102849 https://support.apple.com/en-us/103131 https://www.ithome.com.tw/news/154807 https://www.securityweek.com/apple-finally-patches-exploited-vulnerabilities-macos-big-sur-catalina/ https://nvd.nist.gov/vuln/detail/CVE-2023-41064 https://support.apple.com/en-us/HT212529 https://avd.aliyun.com/detail?id=AVD-2022-26728 https://www.intego.com/mac-security-blog/apple-neglects-to-patch-zero-day-wild-vulnerabilities-for-macos-big-sur-catalina/
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞关于U8cloud所有版本u8capplet.jsp存在XSS漏洞的安全公告PoCCVE-2022-35413: WAPPLES Web Application Firewall <=6.0 - Hardcoded CredentialsPoCapple-cups-exposure: Apple CUPS Sources - ExposurePoCapplezeed-sqli: Applezeed - SQL InjectionPoCwapples-firewall-lfi: Wapples Web Application Firewall - Local File Inclusion(CVE-2025-4082)macOS版Firefox和Thunderbird WebGL着色器越界读取漏洞可导致权限提升Apple Filing Protocol(AFP) 未授权访问漏洞关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告Multiple Apple products CVE-2018-4222越界读取漏洞Apple Filing Protocol(AFP) 弱口令漏洞Apple Webkit CVE-2021-1879 释放后重利用漏洞