CVE-2023-28208

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM...

CVE-2023-28187

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service...

CVE-2023-28187

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service...

CVE-2023-28187

CVE-2023-28187 is a macOS Ventura 13.3 vulnerability affecting the kernel. The issue states that a user may cause a denial-of-service, addressed with improved state management and fixed in macOS Ventura 13.3. Public details across connected sources consistently tie this CVE to kernel-level handli...

CVE-2023-29166: Improper Privilege Management

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges...

CVE-2023-28208: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM...

CVE-2023-28187: Undefined Security Weakness

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service...

Oracle Linux 8 : cups (ELSA-2023-4864)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4864 advisory. 1:2.2.6-51.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : cups (ALSA-2023:4838)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4838 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An...

Oracle Linux 9 : cups (ELSA-2023-4838)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4838 advisory. 1:2.3.3op2-16.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from...

Information Leakage Vulnerability in Renzi's Next-Generation Firewalls

Ltd. is one of the earliest enterprises in China to be involved in the field of network information security, and is committed to providing overall solutions for network auditing and supervision for state management organizations, operators, enterprises and institutions. An information leakage...

Fedora 37 : webkitgtk (2023-19754c5a93)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-19754c5a93 advisory. Fix several crashes and rendering issues Security fixes: CVE-2023-38133, CVE-2023-38572, CVE-2023-38592, CVE-2023-38594, CVE-2023-38595,...

SUSE CVE-2023-32360

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...

CVE-2022-26699

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to cause a denial-of-service to Endpoint Security clients...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to cause a denial-of-service to Endpoint Security clients...

CVE-2022-26699

CVE-2022-26699 is a logic issue in macOS that, due to improved state management, may allow an app to cause a denial-of-service to Endpoint Security clients. The vulnerability is addressed in macOS Ventura 13 (per the description and vendor references). Connected sources corroborate the issue and ...

Rocky Linux 8 : webkit2gtk3 (RLSA-2023:4202)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4202 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS...

Mozilla Firefox Thunderbird State Management

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to state management errors caused by excessive amounts of cookies in the document.cookie file. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected informati...

SUSE CVE-2023-38599

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information...

DEBIAN-CVE-2023-38599

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information...