CVE-2024-54104

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54104

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-36043 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-36036 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-36051 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The UIExtension module has a cross-process screen stack vulnerability. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment,...

PT-2024-36052 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54119: Exposure of Sensitive Information to an Unauthorized Actor

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54117: Exposure of Sensitive Information to an Unauthorized Actor

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54112: Improper Restriction of Rendered UI Layers or Frames

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54110: Improper Restriction of Rendered UI Layers or Frames

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54104: Undefined Security Weakness

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A cross-process page stacking vulnerability exists in Huawei HarmonyOS UIExtension, which can be exploited by an attacker to compromise confidentiality...

AMD Client UEFI – Cross-Process Information Leak

AMD has informed HP of a potential security vulnerability identified in some AMD client processors, which might allow information disclosure. AMD released firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. HP has identified affect...

PT-2024-30811 · Jamf · Jamf Compliance Editor

Name of the Vulnerable Software and Affected Versions: Jamf Compliance Editor versions prior to 1.3.1 Description: The issue concerns a local privilege escalation in the XPC service within the audit functionality of Jamf Compliance Editor on macOS. Recommendations: For versions prior to 1.3.1,...

CentOS 9 : linux-firmware-20230726-138.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the linux- firmware-20230726-138.el9 build changelog. - Cross-Process Information Leak rhbz 2227156 CVE-2023-20593 Note that Nessus has not tested for this issue but has instead relied only...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

Moderate: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this upda...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

OpenSC: Potential PIN bypass when card tracks its own login state

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...