CVE-2024-27886

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode...

CVE-2024-27886

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system from Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.4, which stems from the possibility that an unprivileged application may be able to record keystrokes in other...

CVE-2024-27886: Operator Precedence Logic Error

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode...

CVE-2024-27799

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode...

CVE-2024-27799

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.7.8 and iPadOS version 16.7.8, which arises from the possibility...

PT-2024-22111 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.4 Description: A logic issue was addressed with improved restrictions, allowing an unprivileged app to potentially log keystrokes in other apps, including those using secure input mode. Recommendations: For versions...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets have a security vulnerability that stems from a denial of service in the automotive operating system due to improper authentication of secure IO calls...

Remote Code Execution

h2 is vulnerable to remote code execution. The vulnerability exists due to a lack of secure input validation in DatabaseMetaLocal.java , allowing remote authenticated attackers to execute arbitrary code in the server...

CVE-2019-5222

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

CVE-2019-5222

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

Information disclosure

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

CVE-2019-5222

The CVE-2019-5222 entry concerns an information-disclosure vulnerability in Huawei devices’ Secure Input. Affected: Huawei smartphones with Tony-AL00B line before 9.1.0.216 (C00E214R2P1). Root cause: Secure Input fails to properly limit certain system privileges, enabling information disclosure i...

CVE-2019-5222

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

CVE-2019-5222: Incorrect Permission Assignment for Critical Resource

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216C00E214R2P1. The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful...

Security Advisory - Information Disclosure Vulnerability on Secure Input

There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones. The Secure Input does not properly limit certain system privilege, an attacker tricks the user to install a malicious application, successful exploit could result in information disclosure. Vulnerabili...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...