240 matches found
Input validation
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21284
The CVE-2023-21284 issue affects Google Android and is described across multiple sources as a denial-of-service due to incorrect input validation in multiple functions of DevicePolicyManager.java. The vulnerability is local (attack vector: local) with execution privileges and does not require use...
CVE-2023-21284
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
PT-2023-18063 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to improper input validation in multiple functions of DevicePolicyManager.java. This could lead to local denial of service with User execution privileges needed. User...
PT-2023-8418 · Apple · Ipados +3
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to read sensitive...
About the security content of iOS 15.7.8 and iPadOS 15.7.8
About the security content of iOS 15.7.8 and iPadOS 15.7.8 This document describes the security content of iOS 15.7.8 and iPadOS 15.7.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
About the security content of watchOS 9.6
About the security content of watchOS 9.6 This document describes the security content of watchOS 9.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of macOS Ventura 13.5
About the security content of macOS Ventura 13.5 This document describes the security content of macOS Ventura 13.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
6 tips for a cybersecure honeymoon
You've done it, you've got married. The big day is over, and while you're relaxing on honeymoon you definitely don't want to get distracted by security problems. So, we rounded up some quick tips to keep you safe. Refrain from posting on social media about your honeymoon. This is good practice...
iOS Lockdown Mode effective against NSO zero-click exploit
Apples Lockdown Mode feature alerted a victim to one of the latest NSO exploits, according to a report by Citizen Lab. image courtesy of Citizen Lab This is a huge deal since it shows how useful Lockdown Mode can be, even against exploits developed by one of the worlds most notorious commercial...
About the security content of iOS 15.7.4 and iPadOS 15.7.4
About the security content of iOS 15.7.4 and iPadOS 15.7.4 This document describes the security content of iOS 15.7.4 and iPadOS 15.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
iPhone user watches as stolen phone travels from UK to China
Have you ever wondered what happens to your phone if its stolen while on vacation or a business trip? The answer may surprise you, as it did one Mastodon user who graciously shared a tale of a smartphone gaining some serious air miles. Our intrepid business traveller was in London when their phon...
PT-2022-7232 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to inadequate access control in the Find My function of the macOS operating system, which may allow an attacker to disclose protected information. It was addressed with improved...
CVE-2022-36878
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...
CVE-2022-36878
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...
CVE-2022-36878
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...
Information disclosure
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...
CVE-2022-36878
CVE-2022-36878 concerns Samsung Find My Mobile prior to version 7.2.25.14, where a local attacker can read the device IMEI from logs, leading to sensitive information exposure. Affected software: Find My Mobile (Samsung). Root cause: improper handling/logging of IMEI data. Impact: exposure of a u...
CVE-2022-36878
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...
PT-2022-23682 · Samsung · Find My Mobile
Name of the Vulnerable Software and Affected Versions: Find My Mobile versions prior to 7.2.25.14 Description: The issue allows a local attacker to access the IMEI via log, resulting in exposure of sensitive information. Recommendations: For versions prior to 7.2.25.14, update to version 7.2.25.1...