CVE-2019-8630: Undefined Security Weakness

The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen may show a locked icon after unlocking...

PT-2019-19208

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.1 iPadOS versions prior to 13.1 Description A person with physical access to an iOS device may be able to access contacts from the lock screen. The issue was addressed by restricting options offered on a locked device...

CVE-2019-8775: Undefined Security Weakness

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2013-0293

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...

Privilege escalation

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...

CVE-2013-0293

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...

CVE-2013-0293

The CVE-2013-0293 entry concerns oVirt Node. The issue occurs when the lock screen accepts F2 to drop to a shell, enabling local privilege escalation from a non-privileged state to a higher-privilege level. Per NVD, the vulnerability is local with low attack complexity and no authentication, and ...

CVE-2013-0293: Improper Privilege Management

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...

PT-2019-6842

Name of the Vulnerable Software and Affected Versions oVirt Node affected versions not specified Description The issue allows privilege escalation due to the lock screen accepting F2 to drop to shell. This can potentially be exploited to gain unauthorized access. Recommendations At the moment,...

New Flaw Lets Rogue Android Apps Access Camera Without Permission

An alarming security vulnerability has been discovered in several models of Android smartphones manufactured by Google, Samsung, and others that could allow malicious apps to secretly take pictures and record videos — even when they don't have specific device permissions to do so. You must alread...

RHEL 8 : GNOME (RHSA-2019:3553)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3553 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fixes: evince: uninitialized memory use in function...

gnome-shell: partial lock screen bypass

A vulnerability was found where the gnome-shell lock screen, since version 3.15.91, does not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts and potentially other actions. This vulnerability was fixed in...

Windows 10 Mobile Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen. An attacker who successfully exploited this vulnerability could access the photo library of an affected phone and modify or delete photos without...

Apple iOS and Apple iPadOS VoiceOver Component Lock Screen Bypass Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.VoiceOver is one of the voice assistance components. A lock screen bypass vulnerability exists in the VoiceOver...

Apple to Patch Bug Granting Full Access to 3rd-Party Keyboards

Apple is readying a fix for a bug that could grant full access to third-party keyboards for its mobile devices, including iPhone and iPad. The company posted an alert on its support page about an issue with iOS 13 and iPadOS that affects third-party keyboards users may have installed for the...

iPhone iOS 13 Lockscreen Bypass Flaw Exposes Contacts

An iPhone lock screen bypass has been discovered that could enable an attacker to access victims’ address books, including their contacts’ names, email addresses, phone numbers, mailing addresses and more. The hack was first discovered by researcher Jose Rodriguez, an Apple enthusiast based in...

CVE-2019-3621

Authentication protection bypass vulnerability in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker require...

CVE-2019-3621: Undefined Security Weakness

Authentication protection bypass vulnerability in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker require...

June 27, 2019—KB4501375 (OS Build 18362.207)

None None...

OPENSUSE-SU-2019:1582-1 Security update for gnome-shell

This update for gnome-shell fixes the following issues: Security issue fixed: - CVE-2019-3820: Fixed a partial lock screen bypass bsc1124493. This update was imported from the SUSE:SLE-15:Update update project...