CVE-2023-40386

CVE-2023-40386 concerns a privacy issue in macOS Sonoma 14 where an app may access Notes attachments due to improper handling of temporary files. Apple fixed the issue in macOS Sonoma 14 by addressing temporary-file handling. The Red Hat entry and multiple sources corroborate the same description...

CVE-2023-41980

CVE-2023-41980 describes a permissions issue that could allow an app to bypass Privacy preferences. Public details confirm impact on Apple platforms including iOS 17, iPadOS 17, and macOS Sonoma 14, with the issue fixed in those releases. The vulnerability is tracked across multiple Apple advisor...

CVE-2023-41980

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41980

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-32421

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to observe unprotected user data...

CVE-2023-32421

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to observe unprotected user data...

CVE-2023-32421

CVE-2023-32421 affects macOS Sonoma 14 where a privacy issue arose from improved handling of temporary files; an app may observe unprotected user data. The available connected data confirms the vulnerability is addressed in macOS Sonoma 14. Remediation is to run the fixed macOS Sonoma 14 release....

Signal Will Leave the UK Rather Than Add a Backdoor

Totally expected, but still good to hear: Onstage at TechCrunch Disrupt 2023, Meredith Whittaker, the president of the Signal Foundation, which maintains the nonprofit Signal messaging app, reaffirmed that Signal would leave the U.K. if the countrys recently passed Online Safety Bill forced Signa...

Child health data stolen in registry breach

Canadian healthcare organization Better Outcomes Registry & Network BORN has disclosed a data breach affecting client data. BORN--an Ontario perinatal and child registry that collects, interprets, shares, and protects critical data about pregnancy, birth, and childhood--says it was attacked on Ma...

PT-2023-27768 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS versions prior to Sonoma 14 Description: A privacy issue was addressed with improved private data redaction for log entries. An...

Yunnan ChainDrop Technology Co., Ltd.'s Siyuan Notes Software Web Application Has XSS Vulnerability

SiYuan Notes Software Web App is a privacy-first personal knowledge management system that supports full offline use as well as end-to-end encrypted synchronization. Yunnan ChainDrop Technology Co., Ltd. has an XSS vulnerability in the Siyuan Notes Software Web application, which can be exploited...

PT-2023-23784 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially observe unprotected user data. Recommendations: For versions prior to 14, update to macOS...

PT-2023-27773 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue allows an app to bypass Privacy preferences. It was addressed with improved permissions logic. The problem is related to the Shortcuts app, which allowed programmatic access to TCC protected...

PT-2023-28201 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to bypass certain privacy preferences...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to bypass privacy preferences...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to bypass certain privacy preferences...

PT-2023-22281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to access calendar data saved to a temporary directory. Recommendations: For versions prior to 14,...

PT-2023-27446 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to bypass certain Privacy preferences. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to...

PT-2023-27423 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to access Notes attachments. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to...