CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

PT-2023-8478 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to errors in security settings of the App Sandbox technology in the macOS operating system, which may allow an attacker to exit the isolated software environment and disclose...

PT-2023-8420 · Apple · Applemobilefileintegrity +4

Name of the Vulnerable Software and Affected Versions: AppleMobileFileIntegrity versions prior to macOS Sonoma 14 Safari versions prior to iOS 17 Safari versions prior to iPadOS 17 Description: The issue is related to errors in processing permissions in the AppleMobileFileIntegrity component of t...

The vulnerability of the CharDistributionAnalysis::HandleOneChar function in the NotePad++ text editor allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CharDistributionAnalysis::HandleOneChar function in the NotePad++ text editor is related to the execution of operations outside the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the 3Scale Admin Portal’s API interface management software lies in its ability to disclose information through browser caching, allowing an attacker to expose protected information.

The vulnerability of the 3Scale Admin Portal’s API interfaces relates to the disclosure of information through browser caching. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of TP-LINK’s TL-ER5120G router software, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of TP-LINK’s TL-ER5120G router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the onHostEmulationData() function in Android operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the onHostEmulationData function in Android operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control, which allows attackers to gain unauthorized access to protected information.

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FortiTester software and hardware tools for diagnosing and auditing computer networks lies in the unencrypted storage of confidential information, which allows attackers to gain unauthorized access to protected data.

The vulnerability of the FortiTester software for diagnosing and auditing computer networks lies in the unencrypted storage of confidential information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

The vulnerability of quality management software for automobile manufacturers, related to the leakage of information in error messages, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the leakage of information in error messages. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to disclose protected information.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

PT-2023-5064 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The vulnerability is related to insufficient protection of service data in the Windows DHCP Server Service, which can be exploited by a remote attacker to gain...

The vulnerability of the extractimagesection function in the libtiff library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the extractimagesection function in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

The vulnerability of the FileManager::detectLanguageFromTextBegining() function in the Notepad++ text editor allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the FileManager::detectLanguageFromTextBegining function in the Notepad++ text editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the IPC CanvasTranslator component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IPC CanvasTranslator component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the LoadLibrary function in the cross-platform framework for developing Qt software allows a perpetrator to gain access to protected information.

The vulnerability of the LoadLibrary function in the cross-platform framework for developing Qt software relates to the possibility of bypassing the directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to gain...

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, arises due to errors in processing hypertext links. This vulnerability allows an intruder to gain unauthorized access to protected information.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the fs.openAsBlob() method in the Node.js software platform allows attackers to compromise the integrity of protected information.

The vulnerability of the fs.openAsBlob method in the Node.js programming platform is related to errors in using the --allow-fs-read flag for file system access. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...