About the security content of macOS Monterey 12.7

About the security content of macOS Monterey 12.7 This document describes the security content of macOS Monterey 12.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of iOS 16.7 and iPadOS 16.7

About the security content of iOS 16.7 and iPadOS 16.7 This document describes the security content of iOS 16.7 and iPadOS 16.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

The privacy perils of the Metaverse

A recently released report from New York University claims that the Metaverse, an all-in-one virtual online space, poses a potentially major risk to user privacy. This is because headsets and other similar devices can collect an incredible amount of personal, physical and biometric information. T...

X wants your biometric data

Users of X formerly Twitter paying for a checkmark under what used to be called Twitter Blue now X Premium have some biometric related decisions to make. The BBC reports that Elon Musk, having dismantled the old checkmark system to replace it with the all new Premium, is reintroducing identity...

X (Twitter) to Collect Biometric Data from Premium Users to Combat Impersonation

X, the social media site formerly known as Twitter, has updated its privacy policy to collect users' biometric data to tackle fraud and impersonation on the platform. "Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes," the...

WordPress Biometric Login for WooCommerce Plugin < 1.0.4 is vulnerable to Privilege Escalation

Software Biometric Login for WooCommerce Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A2: Broken Authentication Classification Privilege Escalation CVE N/A Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 23f90f576a47 Credits Alexander Concha Required...

Biometric Login for WooCommerce < 1.0.4 - Unauthenticated Privilege Escalation

Description The plugin does not validate that a user's WebAuthn authentication request succeeded before sending them authentication cookies, making it possible for unauthenticated attackers to take over any accounts having WebAuthn credentials set up on affected sites. PoC While on the site not...

Biometric Login for WooCommerce < 1.0.4 - Unauthenticated Privilege Escalation

Description The plugin does not validate that a user's WebAuthn authentication request succeeded before sending them authentication cookies, making it possible for unauthenticated attackers to take over any accounts having WebAuthn credentials set up on affected sites. While on the site not logge...

The vulnerability of the biometric authentication function of Windows Hello on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created file...

SUSE CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

PT-2023-3124 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hello biometric authentication function of Windows operating systems. This can be exploited to execute arbitrary code...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

Code injection

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

CVE-2023-27706

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

PT-2023-21302 · Bitwarden · Bitwarden Windows Desktop Application

Name of the Vulnerable Software and Affected Versions: Bitwarden Windows desktop application versions prior to v2023.4.0 Description: The issue concerns the storage of biometric keys in the Windows Credential Manager by the Bitwarden Windows desktop application, making them accessible to other...

Bitwarden 安全漏洞

Bitwarden is an open source password manager from Bitwarden Inc. in the United States. A security vulnerability exists in Bitwarden Desktop version v1.20.0 and prior versions, which stems from storing biometric keys in plaintext, allowing a local attacker to decrypt the entire local vault...

CVE-2023-27706

Summary: CVE-2023-27706 affects the Bitwarden Windows desktop client prior to v2023.4.0. The issue is that biometric keys were stored in Windows Credential Manager, making them accessible to other local unprivileged processes. This creates a risk of unauthorized access to biometric material used ...