CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4238

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

CVE-2018-4239

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

Code injection

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4239

CVE-2018-4239 concerns the Magnifier component in iOS prior to 11.4. A local, physically proximate attacker could view the last image used in Magnifier from the lock screen due to a permissions issue. Apple’s security content for iOS 11.4 notes this was addressed by adding/strengthening permissio...

CVE-2018-4238

CVE-2018-4238 affects iOS

CVE-2018-4252

CVE-2018-4252 affects iOS before 11.4 (Siri). A physical-access attacker could enable Siri from the lock screen and access protected notification content; Apple corrected this in iOS 11.4 by tightening Siri permissions and lock-screen checks. The issue is explicitly tied to Siri permissions and l...

CVE-2018-4239

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-4238

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

Design/Logic Flaw

Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen...

PT-2018-16507

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 Description The issue involves the Siri component and allows physically proximate attackers to bypass the lock-screen protection mechanism, obtaining private notification content via Siri. Recommendations For iOS...

PT-2018-16501

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 Description The issue involves the Magnifier component, allowing physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image. Recommendations For iOS versions...

PT-2018-16500

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 Description The issue involves the Siri component and allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri. Recommendations For iOS versions prior to 11.4, update to...

Fair Smart Antivirus 8 filppd.sys Driver Has Denial of Service Vulnerability

Fil Smart Antivirus 8 is an antivirus program from Beijing Fil Shield Technology Co. filppd.sys is a kernel mode driver in Fil Smart Antivirus 8. A denial of service vulnerability exists in the filppd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 and V8.1.7.6865. An attacker can exploit the...

CVE-2018-4252: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4238: Incorrect Permission Assignment for Critical Resource

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...