3100 matches found
CVE-2024-44263
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data...
CVE-2024-44263
CVE-2024-44263 is an Apple iOS/iPadOS vulnerability describing a logic issue related to state management that could allow an app to access user-sensitive data. The public records consistently tie the flaw to iOS 18.1 and iPadOS 18.1; Apple’s advisories and CVE records confirm that the issue is ad...
PT-2024-31090 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: A logic issue was addressed with improved state management, which may allow an app to access user-sensitive data. Recommendations: For iOS versions prior to 18.1, update to...
PT-2024-31043 · Apple · Ipados +6
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.1 visionOS versions prior to 2.1 tvOS versions prior to 18.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 watchOS versions prior to 11.1 Description: A cookie management issue was addressed with improve...
PT-2024-41824
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A flaw allows a local attacker with physical access to inject keyboard events into applications running on a locked device. This was addressed through improved state management. Recommendations Update t...
CVE-2024-47669 nilfs2: fix state management in error path of log writing function
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit a694291a6211 "nilfs2: separate wait function from nilfssegctorwrite" was applied, the log writing function nilfssegctordoconstruct was able to issue...
CVE-2024-47669
CVE-2024-47669 relates to a Linux kernel issue in the nilfs2 file system. The vulnerability arises in the error path of the log writing function (nilfs_segctor_do_construct) after a694291a6211, enabling problematic I/O behavior across logs in segments when multiple logs are created. The root caus...
undertow: Improper State Management in Proxy Protocol parsing causes information leakage
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the...
SUSE CVE-2024-27830
This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. A maliciously crafted webpage may be able to fingerprint the user...
SUSE CVE-2024-40857
This issue was addressed through improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to universal cross site scripting...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to state management errors, allows attackers to compromise data integrity.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to state management errors. Exploiting this vulnerability allows an attacker to compromise data integrity...
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to state management errors, allows attackers to access confidential data.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to state management errors. Exploiting this vulnerability allows an attacker to access confidential data...
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to state management errors, allows attackers to access confidential data.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to state management errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
Apple Safari Security Update (HT121241)
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
Apple Xcode Security Update (HT121239)
Apple Xcode is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescription...
CVE-2024-44202
An authentication issue was addressed with improved state management. This issue is fixed in iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
CVE-2024-44191
This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. An app may gain unauthorized access to Bluetooth...
CVE-2024-44191
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, Xcode 16, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. An app may gain unauthorized access to Bluetooth...
CVE-2024-44171
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, watchOS 11. An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features...