CVE-2024-54110: Improper Restriction of Rendered UI Layers or Frames

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2024-2946)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a...

CVE-2024-54119: Exposure of Sensitive Information to an Unauthorized Actor

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

CVE-2024-54485

A logic issue in the VoiceOver component of iOS and iPadOS allows an attacker with physical access to the device to view notification content from the lock screen. This vulnerability was addressed by adding additional logic. The issue is fixed in iOS 18.2 , iPadOS 18.2 , iPadOS 17.7.3 , and macOS...

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

CVE-2024-44248

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A user with screen sharing access may be able to view another user's screen...

CVE-2024-44248

This CVE concerns Apple macOS Screen Sharing Server. The affected software is macOS Ventura and Sonoma (fixed in Ventura 13.7.2 and Sonoma 14.7.2). The underlying issue stems from state management allowing a user with screen sharing access to view another user’s screen. The NVD entry flags a Conf...

CVE-2024-44248

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with screen sharing access may be able to view another user's screen...

PT-2024-36352 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue allows an attacker with physical access to an iOS device to view notification content from the lock screen. This is possible due t...

PT-2025-35158 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: An application may be able to record the screen without a visible indicator. This issue was addressed with improved checks. Recommendations: Update to macOS version 15.2...

PT-2024-30639 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to the onPrimaryClipChanged method in ClipboardListener.java, which could allow an attacker to partially bypass the lock screen. This could lead to a local escalati...

ASB-A-317048495

Bulletin has no description...

Multiple FCNT Android devices vulnerable to authentication bypass

Overview Multiple FCNT Android devices provide security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc. The devices contain an authentication bypass vulnerability CWE-306, where, under certain conditions, the setting pages may be accessed without...

PT-2024-36056 · Click Studios · Passwordstate

Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate versions prior to build 9920 Description: The issue concerns a potential permission escalation on the edit folder screen. Recommendations: For versions prior to build 9920, update to a version that includes the fix...

FCNT 访问控制错误漏洞

FCNT is a cell phone service from FCNT. FCNT suffers from an access control error vulnerability that originates under certain conditions when an attacker can directly manipulate the device with the user's unlocked screen, exposing the settings page of a provided security feature and/or changing...

CVE-2024-54124: Incorrect Authorization

In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen...

CVE-2024-54124

Click Studios Passwordstate versions prior to build 9920 are susceptible to a potential permission escalation vulnerability on the edit folder screen . This flaw allows for unauthorized access or actions within the password management software. To remediate this issue, users should update to a ve...

Click Studios Passwordstate 安全漏洞

Click Studios Passwordstate passwordstate is a password management software from the Click Studios team in Australia. The program provides users with the ability to save their passwords, record their accounts and passwords, and keep them safe. This program offers you the possibility to keep a...

Fuji Electric Monitouch V-SFT 缓冲区错误漏洞

Fuji Electric Monitouch V-SFT is a screen configuration software from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric Monitouch V-SFT that stems from a lack of proper validation of user-supplied data, which could result in writes beyond the end of the allocated buffer. A...