CVE-2021-39990

CVE-2021-39990 affects Huawei HarmonyOS’ lock screen component. The issue is a stack-based buffer overflow in the screen lock module, with exploitation potentially impacting user experience. The provided documents mention Huawei HarmonyOS in relation to this CVE and describe the vulnerability typ...

CVE-2021-39990: Out-of-bounds Write

The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience...

PT-2022-11116

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The screen lock module has a Stack-based Buffer Overflow issue. Successful exploitation of this issue may affect user experience. Recommendations At the...

Apple macOS High Sierra has an unspecified vulnerability

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers. Apple macOS High Sierra versions prior to 10.13.1 have a security vulnerability that stems from the fact that the screen lock may accidentally remain unlocked. No details of the vulnerability are current...

CVE-2017-13907

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked...

CVE-2017-13907

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked...

PT-2021-8557

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.1 Security Update 2017-001 Sierra affected versions not specified Security Update 2017-004 El Capitan affected versions not specified Description A state management issue was addressed with improved...

CVE-2017-13907: Undefined Security Weakness

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked...

Apple macOS High Sierra 安全漏洞

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers. Apple macOS High Sierra versions prior to 10.13.1 have a security vulnerability that stems from the fact that the screen lock may accidentally remain unlocked. No details of the vulnerability are current...

Apple iOS 信息泄露漏洞

Apple iOS is a set of operating systems developed by Apple Inc. for mobile devices. Apple iOS 15.1 and iPadOS 15.1 previously contained an information disclosure vulnerability that could be exploited by a local attacker to view contacts by locking the screen...

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

UBUNTU-CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

Deploying EFBs securely

It may come as a surprise to some to discover that electronic flight bag security at airlines is often quite variable. Whilst some use an MDM, a lot don’t. Of those who do, PINs are often weak. Some airlines actively encourage pilots to use their devices for personal use. We’ve heard stories of a...

USN-4958-1 caribou vulnerability

It was discovered that the Caribou onscreen keyboard could be made to crash when given certain input values. An attacker could use this to bypass screen-locking applications that support using Caribou as an input mechanism...

EFB Safety Advice for Pilots

As a pilot you will be all too aware of how important an electronic flight bag EFB is to you and your role. It’s probably critical to your takeoff performance calculations, your roster, pax lists and plenty more. It’s one thing if its not working, but have you ever stopped to consider what could...

Windows Screen Lock Bypass

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to bypass Windows’ screen lock security features...