CVE-2024-54516

CVE-2024-54516 describes a permissions issue in macOS where an app may be able to approve a launch daemon without user consent. Concrete details in connected sources show the vulnerability affects macOS Sonoma 14.7.2 and macOS Sequoia 15.2, with an issue fixed in those updates. The underlying ris...

CVE-2024-54516

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to approve a launch daemon without user consent...

CVE-2024-54516

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to approve a launch daemon without user consent...

PT-2025-5291 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 Description: An access issue was addressed with additional sandbox restrictions. This issue allows an app to bypass Privacy...

PT-2025-5292 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.4 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 Description: This issue is related to insufficient...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.2, which originates from an application that may be able to approve the launch of a daemon without user consent...

The vulnerability of the Launch Services interface for macOS operating systems allows attackers to bypass the sandbox protection mechanism.

The vulnerability of the Launch Services interface for MacOS systems is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to bypass the sandbox’s security mechanisms...

CVE-2024-49737

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CLSA-2024-1735300286 gnome-shell: Fix of CVE-2024-36472

CVE-2024-36472: fix portal helper from launching automatically based on network responses to prevent loading untrusted JavaScript code...

Application launch is stuck at the stage "Please wait for the Local Session Manager"

Application launch is stuck at the stage "Please wait for the Local Session Manager". Launch is initiated using FAS enabled storefront URL. No error message displayed to user. No credential prompt. The launch works fine when using storefront URL without FAS...

Medium: gnome-shell

Issue Overview: In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to...

Launch of Resources from CWA 2402,2403 or 2405 may fail if MSTeams Citrix plugin is installed

Affected versions : CWA release 2402, 2403 or 2405 When launching a published Desktop users are presented with a grey window momentarily. This then closes but shows connected in connection center Application launches will simply fail but the below error will be observed in the event logs In the...

CVE-2024-42196

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...

CVE-2024-42196 HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...

CVE-2024-42196 HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...

CVE-2024-42196

CVE-2024-42196 affects HCL Launch: it stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs. The NVD entry reports a HIGH confidentiality impact with LOCAL attack vector and low privileges required, with base scores around 5.5–6....

HCL Launch 安全漏洞

HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL, Inc. for handling the most complex deployment processes in DevOps. HCL Launch has a security vulnerability that stems from allowing potentially sensitive information to be stored in log files...

PT-2024-29791 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns HCL Launch storing potentially sensitive information in log files. This data could be accessed by a local user with permission to read HTTP request logs...

CVE-2024-42195

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...