February 14, 2018—KB4077675 Update for Windows 10 Mobile (OS Build 15254.248)

February 14, 2018—KB4077675 Update for Windows 10 Mobile OS Build 15254.248 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. This build includes all the improvements from KB4074592. Addresses issue where the...

synaptics.com XSS vulnerability

Open Bug Bounty ID: OBB-585322 Description| Value ---|--- Affected Website:| synaptics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple Siri is the aeration privacy vulnerability: lock screen notifications directly read-vulnerability warning-the black bar safety net

! iOS 11, Apple introduced a new way to protect user privacy, the user through the iPhone's lock screen hide notification content, until the use of Touch ID or Face ID to unlock the device. But in fact, even if unable to unlock the phone, or is there a very simple way to read these hidden...

FAQ: Can we disable FaceID as passcode for Secure Hub on iPhone X?

Q: Can we disable FaceID as passcode for Secure Hub on iPhone X? A: Face ID feature uses the same APIs as the Touch ID feature on Apple devices. Currently we have the option to disable FaceID/TouchID for unlocking the devices using restrictions policy. However, we cannot restrict the iCloud or...

XenMobile: Usage of iPhone X FaceID feature

Question: Is the iPhone X feature of FaceID supported in XenMobile? Answer: Yes, FaceID authentication is supported with XenMobile. iPhone X FaceID uses the same APIs as the Touch ID feature in other iOS devices. Question: Will there be merge of both functions Touch ID and FaceID, since it depend...

touch-here.com XSS vulnerability

Open Bug Bounty ID: OBB-568224 Description| Value ---|--- Affected Website:| touch-here.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

February 13, 2018—KB4074588 (OS Build 16299.248)

None None...

macOS Kernel - Use-After-Free Due to Lack of Locking in AppleEmbeddedOSSupportHostClient::registerNo

Exploit for macOS platform in category dos / poc / AppleEmbeddedOSSupportHost.kext is presumably involved in the communication with the OS running on the touch bar on new MBP models. Here's the userclient's registerNotificationPort method: text:0000000000002DE4 ;...

macOS Kernel - Use-After-Free Due to Lack of Locking in 'AppleEmbeddedOSSupportHostClient::registerNotificationPort'

/ AppleEmbeddedOSSupportHost.kext is presumably involved in the communication with the OS running on the touch bar on new MBP models. Here's the userclient's registerNotificationPort method: text:0000000000002DE4 ; AppleEmbeddedOSSupportHostClient::registerNotificationPortipcport , unsigned int,...

Security update for webkit2gtk3 (important)

This update for webkit2gtk3 fixes the following issues: Update to version 2.18.5: + Disable SharedArrayBuffers from Web API. + Reduce the precision of "high" resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-5753...

openSUSE Security Update : webkit2gtk3 (openSUSE-2018-118) (Meltdown) (Spectre)

This update for webkit2gtk3 fixes the following issues : Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-575...

January 31, 2018—KB4058258 (OS Build 16299.214)

None None...

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to obtain access to sensitive information. NCCIC/US-CERT encourages users and administrators to review Apple security pages for the following products and apply the...

The vulnerability of HMI/SCADA systems like InTouch Machine Edition and InduSoft Web Studio arises from buffer overflows in the stack. This allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of HMI/SCADA systems such as InTouch Machine Edition and InduSoft Web Studio arises due to buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to gain elevated privileges and execute arbitrary code...

About the security content of iOS 11.2.1

About the security content of iOS 11.2.1 This document describes the security content of iOS 11.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2017-1000405

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by getuserpages. In such case, the pmd will become dirty. This scenario breaks the new canfollowwritepmd's logic - pmd can become dirt...

DEBIAN-CVE-2017-1000405

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by getuserpages. In such case, the pmd will become dirty. This scenario breaks the new canfollowwritepmd's logic - pmd can become dirt...

PT-2017-4077 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.38 through 4.14 Description: The issue is related to the touch pmd function in the Linux Kernel, which can be exploited due to incorrect synchronization when using a shared resource. This can allow an attacker to...

CVE-2017-8141

The Touch Panel TP driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple...

CVE-2017-8141

The Touch Panel TP driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple...