1104 matches found
PT-2023-19645
Name of the Vulnerable Software and Affected Versions Butterfly Button plugin affected versions not specified Description The Butterfly Button plugin may leave traces of its use on a user's device. Since it is used for reporting domestic problems, this could lead to a spouse knowing about its use...
VulnCheck KEV: CVE-2023-23522
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data...
About the security content of macOS Ventura 13.2.1
About the security content of macOS Ventura 13.2.1 This document describes the security content of macOS Ventura 13.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
PT-2023-6714
Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.2.1 Description The issue is related to insecure temporary files in the Shortcuts component of macOS Ventura, which may allow an attacker to access confidential information. This privacy issue can be exploite...
PT-2023-18997
Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.6.3 macOS Big Sur versions prior to 11.7.3 macOS Monterey versions prior to 12.6.3 macOS Ventura versions prior to 13.2 watchOS versions prior to 9.3 iOS versions prior to 15.7.3 iOS versions prior to 16.3 iPadOS...
About the security content of macOS Big Sur 11.7.3
About the security content of macOS Big Sur 11.7.3 This document describes the security content of macOS Big Sur 11.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of macOS Monterey 12.6.3
About the security content of macOS Monterey 12.6.3 This document describes the security content of macOS Monterey 12.6.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Apple watchOS 日志信息泄露漏洞
Apple watchOS is a set of smartwatch operating systems from the US-based Apple. Versions of Apple watchOS prior to 9.3 suffer from a log information disclosure vulnerability that stems from a privacy issue in which apps may be able to access information about a user's contacts...
Is Your New Car a Threat to National Security?
Putting sensor-packed Chinese cars on Western roads could be a privacy issue. Just ask Tesla...
Nextcloud: Moderator can enable cam/mic remotely if cam/mic-permission was disabled while user has activated cam/mic
Summary: add summary of the vulnerability Steps To Reproduce: 1. Create a Call as User A Moderator 2. Add User B to the call 3. Start the call as User A 4. User B joins the call and enables the camera 5. User A removes all permissions for User B, cam and mic are now disabled 6. User A grants all...
CVE-2022-22644
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...
CVE-2022-22644
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...
CVE-2022-22644
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...
Design/Logic Flaw
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...
CVE-2022-22644
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...
CVE-2022-22644
CVE-2022-22644 describes a privacy issue in macOS Monterey related to how contact card data was handled. The connected documents confirm the vulnerability affects how information about a user’s contacts could be accessed by a malicious application, and Apple addressed it by implementing improved ...
CVE-2022-22644: Undefined Security Weakness
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts...
PT-2022-15593
Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.3 Description A privacy issue existed in the handling of Contact cards due to inadequate state management, potentially allowing a malicious application to access information about a user's contacts. Recommendations F...
HackerOne: Private invitation links/tokens leak to third-party analytics site
Summary: Private invite links are normally FILTERED before sending to third-party analytics sites. But it is seen that in few cases where the invitation link that requires users to accept NDA policy, the private invitation links are still sent to third party analytics site. Steps to reproduce 1...