14 matches found
CVE-2026-32868
creationtimestamp| type| source ---|---|--- 2026-03-19 18:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgnjv5j422e...
CVE-2023-32868
In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363632; Issue ID: ALPS07363632...
CVE-2022-32868
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions...
CVE-2025-32868
creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapsprgi2h 2025-04-16 20:48:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349606025396812 2025-04-16 21:54:56+00:00| seen|...
CVE-2025-32868
CVE-2025-32868 affects Siemens TeleControl Server Basic prior to v3.1.2.2. An SQL injection via the internal ExportCertificate method can let an attacker read/write the database and execute code with NT AUTHORITY\NetworkService privileges, given network access to port 8000. Multiple sources confi...
CVE-2024-32868 ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass
ZITADEL provides users the possibility to use Time-based One-Time-Password TOTP and One-Time-Password OTP through SMS and Email. While ZITADEL already gives administrators the option to define a Lockout Policy with a maximum amount of failed password check attempts, there was no such mechanism fo...
CVE-2023-32868
creationtimestamp| type| source ---|---|--- 2023-12-22 12:21:44+00:00| seen| https://t.me/ctinow/158338...
CVE-2023-32868
CVE-2023-32868 concerns MediaTek’s display DRM module, with a missing bounds check causing an out-of-bounds write. The vulnerability is described as allowing local escalation of privileges to System level, with no user interaction required. Reported patch: ALPS07363632 (Issue ALPS07363632). Conne...
CVE-2022-32868
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions...
CVE-2022-32868
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions...
CVE-2022-32868
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions...
CVE-2022-32868
CVE-2022-32868 affects Safari and related iOS/iPadOS web-extension handling. The issue is a logic bug in state management that could enable a website to track users via Safari web extensions. The NVD/NIST description confirms a fix in Safari 16, iOS 16, iOS 15.7, and iPadOS 15.7. Connected source...
Samsung Mobile Device SQL Injection Vulnerability (CNVD-2020-32868)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a SQL injection vulnerability that can be exploited by attackers to execute arbitrary SQL queries with the help of specially crafted SQL statements...
CVE-2021-32868
CVE-2021-32868 is rejected and does not represent an active vulnerability entry.