PT-2023-18094 · Google · Android

Name of the Vulnerable Software and Affected Versions: In Content affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-18084 · Unknown · Content Service

Name of the Vulnerable Software and Affected Versions: Content Service affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without requiring query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-18125 · Unknown · Package Manager

Name of the Vulnerable Software and Affected Versions: Package Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by the disclosure of side-channel information in Overlay Manager, and can be exploited by an attacker to obtain sensitive information...

PT-2023-18106 · Unknown · Overlay Manager

Name of the Vulnerable Software and Affected Versions: Overlay Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

PT-2023-18121 · Unknown · Game Manager Service

Name of the Vulnerable Software and Affected Versions: Game Manager Service affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without requiring query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-18081 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in ActivityManagerService, allowing an attacker to determine whether an app is installed without query permissions. This could le...

PT-2023-18099 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in Activity Manager, allowing an attacker to determine whether an app is installed without query permissions. This could lead to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by the disclosure of side channel information in the SMS service. The vulnerability can be exploited by an attacker to obtain sensitive...

PT-2023-18095 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a side channel information disclosure in the UsageStatsService, which could allow reading installed 3rd party apps. This leads to local information disclosure withou...

PT-2023-18086 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-18072 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in PackageManagerNative, allowing an attacker to determine whether an app is installed without query permissions. This could lead...

PT-2023-18093 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in ContentService, allowing an attacker to determine whether an app is installed without query permissions. This could lead to...

PT-2023-18109 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: In Text Services affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with ...

PT-2023-18078 · Google · Android

Name of the Vulnerable Software and Affected Versions: Package Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

PT-2023-18113 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by the disclosure of side channel information in the device policy. An attacker can exploit this vulnerability to obtain sensitive...

PT-2023-18097 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in Device Policy, allowing an attacker to verify if a particular admin app is registered on the device. This could lead to local...

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs

A group of academics has devised a novel side-channel attack dubbed iLeakage that exploits a weakness in the A- and M-series CPUs running on Apple iOS, iPadOS, and macOS devices, enabling the extraction of sensitive information from the Safari web browser. "An attacker can induce Safari to render...

Patch…later? Safari iLeakage bug not fixed

Apple has released updates for its phones, Macs, iPads, watches, and TV streaming devices, fixing a bunch of security problems. But amid all that activity, one fix is notably absent—there is nothing to address the vulnerability dubbed iLeakage. iLeakage is a side-channel attack that can force the...