CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

The vulnerability of the Qualcomm QTEE API in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm QTEE API in the Android operating system is related to errors in handling array indexes. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm operating system Android allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Video Parser component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Video Parser component in the Android operating system arises due to buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm VT Call Handler component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm VT Call Handler component in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information during VT calls...

The vulnerability of the Linux operating system’s kernel (fs/userfaultfd.c), related to memory usage after it is freed, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel fs/userfaultfd.c is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information through the use of the...

UBUNTU-CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

The vulnerability of the Media Framework component of the Android operating system, which allows for the disclosure of protected information

The vulnerability of the Media Framework component decoder/impeg2ddechdr.c in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability in the component of libsvn_fs_fs/fs_fs.c of the Subversion version control system allows a attacker to disclose protected information or cause service failures.

The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...

The vulnerability of the Redmine.pm web application for managing projects and tasks allows a perpetrator to gain access to protected information or exert other effects.

The vulnerability of the Redmine.pm web application for managing projects and tasks in Redmine is related to the lack of verification of the “Repository” module in project settings. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain access to protected...

The vulnerability of PlayReady DRM component in the Android operating system from the CAF repository, which allows a violator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of PlayReady DRM on the Android operating system, identified from the CAF repository, is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of PlayReady DRM component in the Android operating system from the CAF repository, which allows a violator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of PlayReady DRM on the Android operating system, found in the CAF repository, is related to the lack of checks for buffer size. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Secure File System (SFS), a secure file system in the Android operating system, allows a perpetrator to gain access to protected information and manage resources.

The vulnerability of the secure file system SFS in the Android operating system arises due to numerical overflow or cyclic shift. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information, manage resources, or execute programs...

The vulnerability of the WCDMA component of the Android operating system, which allows a hacker to gain access to protected information

The vulnerability of the WCDMA component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

Vulnerability in the Core Kernel of the Android operating system, allowing a intruder to gain access to protected information

The vulnerability in the Core Kernel of the Android operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the iTunes Store web service’s iTunes sandbox component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information ...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the iOS operating system’s accessibility component is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting locally, to access protected information about photos and contacts by leveraging the additional accessibility...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Local Authentication component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of protected information by...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Contacts component in the iOS operating system is related to deficiencies in access control for the Address Book application. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information...