CVE-2023-40456

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

PT-2023-8422 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is related to insufficient access controls in the Photos Storage of macOS, iOS, and iPadOS operating systems. This may allow an attacker to...

PT-2023-8484 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: An authentication issue was addressed with improved state management, allowing photos in the Hidden Photos Album to be viewed without authentication. The issue is related to a lack of authentication for...

PT-2023-8423 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 iOS versions prior to 16.7 iPadOS versions prior to 16.7 Description: The issue is related to the handling of temporary files, which may allow an app to access edited photos saved to a temporary directory. This coul...

PT-2023-27451 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A configuration issue was addressed with additional restrictions. This issue may allow an app to access a user's Photos Library...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from the fact that Safari may save photos to an unprotected location...

PT-2023-6030 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 Description: The issue is related to inadequate access control in the Photos Storage of the operating systems, which may allow an app ...

PT-2023-28653 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 watchOS versions prior to 10 tvOS versions prior to 17 Description: The issue allows an app to access edited photos saved to a temporary directory. This wa...

USN-6377-1 libraw vulnerability

It was discovered that LibRaw incorrectly handled certain photo files. If a user o automated system were tricked into processing a specially crafted photo file, a remote attacker could possibly cause applications linked against LibRaw to crash, resulting in a denial of service...

CVE-2022-32876

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...

CVE-2022-32876

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...

Authentication flaw

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...

CVE-2022-32876

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...

CVE-2022-32876

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...

CVE-2022-32876

CVE-2022-32876 is a logic-issue vulnerability in macOS that could allow a shortcut to view the hidden Photos album without authentication. It is fixed in macOS Ventura 13. The issue is described as an improvement to restrictions and is fixed specifically for Ventura 13.0+. Affected product: macOS...

Hackers Leak PII Data and Photos of Brazilian Plastic Surgery Patients

By Waqas The victim of the data breach is the Roberto Polizzi Plastic Surgery Clinic based in Belo Horizonte, Brazil. This is a post from HackRead.com Read the original post: Hackers Leak PII Data and Photos of Brazilian Plastic Surgery Patients...

photos-culinaires.com Cross Site Scripting vulnerability OBB-3568557

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ASB-A-277741109

In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-272020068

In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-271851153

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...