Apple iOS/tvOS/iPadOS/watchOS/macOS CVE-2019-8848 Privilege Escalation Vulnerability

Description Apple iOS/tvOS/iPadOS/watchOS/macOS are prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on an affected system. Technologies Affected Apple Ipad Mini- Apple TV Apple Watch Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple i...

Apple iOS/iPadOS/watchOS/macOS CVE-2019-8856 Security Vulnerability

Description Apple iOS/iPadOS/watchOS/macOS are prone to a security vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. Technologies Affected Apple Ipad Mini- Apple Watch Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple iOS 10.2 Apple...

Sony Xperia Touch Access Control Error Vulnerability

The Sony Xperia Touch is a touch projector from Sony Japan. A vulnerability in the Sony Xperia Touch build fingerprint: Sony/blancwindy/blancwindy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys in the com. An access control error vulnerability exists in the...

Apple Security Update: iOS 13.2.3 and iPadOS 13.2.3

Apple recommends to install security update iOS 13.2.3 and iPadOS 13.2.3 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

CVE-2019-15743

The Sony Xperia Touch Android device with a build fingerprint of Sony/blancwindy/blancwindy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app with a package name of com.sonymobile.android.maintenancetool.testmic app versionCode=24, versionName=7.0 that allows...

Design/Logic Flaw

The Sony Xperia Touch Android device with a build fingerprint of Sony/blancwindy/blancwindy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app with a package name of com.sonymobile.android.maintenancetool.testmic app versionCode=24, versionName=7.0 that allows...

CVE-2019-15743

The Sony Xperia Touch Android device with a build fingerprint of Sony/blancwindy/blancwindy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app with a package name of com.sonymobile.android.maintenancetool.testmic app versionCode=24, versionName=7.0 that allows...

CVE-2019-15743: Externally Controlled Reference to a Resource in Another Sphere

The Sony Xperia Touch Android device with a build fingerprint of Sony/blancwindy/blancwindy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app with a package name of com.sonymobile.android.maintenancetool.testmic app versionCode=24, versionName=7.0 that allows...

Apple Security Update: iOS 13.2.2 and iPadOS 13.2.2

Apple recommends to install security update iOS 13.2.2 and iPadOS 13.2.2 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

Apple Security Update: iOS 13.2.2 and iPadOS 13.2.2

Apple recommends to install security update iOS 13.2.2 and iPadOS 13.2.2 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

Honeywell equIP/Performance Series IP Cameras/Recorders Authentication Bypass Vulnerability

Description Honeywell Tuxedo Touch Controller is prone to a remote authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks. Technologies Affected Honeywell BD3PR1 Honeywell...

Apple iOS/iPadOS/tvOS/watchOS/macOS Multiple Security Vulnerabilities

Description Apple iOS, iPadOS, tvOS, watchOS and macOS are prone to the following security vulnerabilities: 1. A denial-of-service vulnerability 2. An authentication-bypass vulnerability 3. Multiple memory-corruption vulnerabilities 4. An information disclosure vulnerability An attacker can...

Apple Security Update: iOS 13.1.3 and iPadOS 13.1.3

Apple recommends to install security update iOS 13.1.3 and iPadOS 13.1.3 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

Apple Security Update: iOS 13.1.3 and iPadOS 13.1.3

Apple recommends to install security update iOS 13.1.3 and iPadOS 13.1.3 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

New Unpatchable iPhone Exploit Allows Jailbreaking

A new iOS exploit allows jailbreaking of pretty much all version of the iPhone. This is a huge deal for Apple, but at least it doesn't allow someone to remotely hack people's phones. Some details: I wanted to learn how Checkm8 will shape the iPhone experience­ -- particularly as it relates to...

Apple Security Update: iOS 13.1.2 and iPadOS 13.1.2

Apple recommends to install security update iOS 13.1.2 and iPadOS 13.1.2 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

Apple Security Update: iOS 12.4.2

Apple recommends to install security update iOS 12.4.2 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPad touch 6th generation...

CVE-2019-6840

A Format String: CWE-134 vulnerability exists in U.motion Server MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15, which could allow an attacker to send a crafted messa...

About the security content of iOS 12.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Google Android Touch driver boost vulnerability (CNVD-2019-37965)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. An elevation of privilege vulnerability exists in the Touch driver in Android. An attacker can exploit this vulnerability to elevate privileges...