CVE-2020-27098

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-27098

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-27098

CVE-2020-27098 affects Android 11 and targets UriGrantsManagerService.checkGrantUriPermission. The vulnerability describes a permissions bypass that could allow an app to access contacts via a local, privilege-escalation path without user interaction. It is a local information-disclosure issue (c...

CVE-2019-8777

CVE-2019-8777 is an Apple macOS lock-screen information disclosure vulnerability. The affected components concern the lock screen handling that could allow a local attacker to view contacts from a locked device. The Apple advisories indicate the issue was addressed by improved state management an...

CVE-2020-3859

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2020-3859

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2020-3828

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2020-3828

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2020-3859

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2019-8775

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

Information disclosure

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2018-4430

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1...

CVE-2018-4380

A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...

CVE-2018-4430

CVE-2018-4430 describes a lock-screen vulnerability in iOS where an attacker could access contacts on a locked device. The Red Hat and NVD entries mirror the Apple advisory, stating the issue affected versions prior to iOS 12.1.1 and was addressed by improved state management. The Apple security ...

UBUNTU-CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

Apple iOS (Combo) Password Bypass Vulnerability (CNVD-2018-26455)

Apple iOS is an operating system developed for mobile devices. A password bypass vulnerability exists in Apple iOS Combo. Allowing a local attacker to access sensitive desired data such as contacts, photo gallery or default apps...

Apple iOS (Combo) Password Bypass Vulnerability

Apple iOS is an operating system developed for mobile devices. A password bypass vulnerability exists in Apple iOS Combo. It allows local attackers to access sensitive desirable data such as contacts, photo gallery, or default apps...

Apple iOS v12.1.1 - (Combo) Passcode Bypass Vulnerability

Document Title: =============== Apple iOS v12.1.1 - Combo Passcode Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2169 Watch Video: https://www.youtube.com/watch?v=QjhV59-NA60 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2162...

New iPhone Passcode Bypass Hack Exposes Photos and Contacts

Looking for a hack to bypass the passcode or screen lock on iPhones? Jose Rodriguez, an iPhone enthusiast, has discovered a passcode bypass vulnerability in Apple's new iOS version 12 that potentially allows an attacker to access photos and contacts, including phone numbers and emails, on a locke...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the iOS operating system’s accessibility component is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting locally, to access protected information about photos and contacts by leveraging the additional accessibility...