CVE-2024-34734

In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

ASB-A-304772709

In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

SUSE CVE-2024-26916

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4750332dbe "drm/amdgpu/sdma5.2: add begin/enduse ring callbacks" caused GFXOFF control to be used more heavily and the codepath that was removed from commit...

DEBIAN-CVE-2024-26916

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4750332dbe "drm/amdgpu/sdma5.2: add begin/enduse ring callbacks" caused GFXOFF control to be used more heavily and the codepath that was removed from commit...

CVE-2024-26916 Revert "drm/amd: flush any delayed gfxoff on suspend entry"

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4750332dbe "drm/amdgpu/sdma5.2: add begin/enduse ring callbacks" caused GFXOFF control to be used more heavily and the codepath that was removed from commit...

CVE-2024-20827

Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen...

CVE-2024-20827

Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen...

Improper access control

Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen...

CVE-2024-20827

Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen...

CVE-2024-20827

Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen...

CVE-2024-20827

Summary: Samsung Gallery vulnerable to improper access control, enabling physical attackers to view pictures on the lockscreen via a physical keyboard. Affected software: Samsung Gallery, versions prior to 14.5.04.4. Root cause: improper access control, leading to confidentiality impact (C:H) per...

PT-2024-18734 · Samsung · Samsung Gallery

Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 14.5.04.4 Description: The issue is related to improper access control in Samsung Gallery, allowing physical attackers to access pictures using a physical keyboard on the lockscreen. Recommendations: For...

CVE-2023-6998

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0...

CVE-2023-6998

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0...

Privilege escalation

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0...

CVE-2023-6998

CVE-2023-6998 describes an improper privilege management vulnerability in CoolKit Technology’s eWeLink app for Android and iOS, where versions prior to 5.2.0 allow a lockscreen bypass. The issue is characterized as a local vulnerability with no user interaction required, potentially affecting con...

CVE-2023-6998 Lockscreen bypass in eWeLink App

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0...

PT-2023-32834 · Ewelink · Ewelink

Name of the Vulnerable Software and Affected Versions: eWeLink versions prior to 5.2.0 Description: The issue is related to improper privilege management in the eWeLink application on Android and iOS, allowing for application lockscreen bypass. Recommendations: For versions prior to 5.2.0, update...

CVE-2023-40117

In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40117

In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...