CVE-2024-54117

CVE-2024-54117 is described as a cross-process screen stack vulnerability in the Huawei HarmonyOS UIExtension module. The available documents identify the affected component (UIExtension in HarmonyOS) and note an impact on confidentiality if exploited, but do not provide concrete root cause detai...

CVE-2024-54117

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54117

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54112

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54112

Huawei HarmonyOS is affected by CVE-2024-54112, a cross-process screen stack vulnerability in the UIExtension module. The root cause is a vulnerability in the UIExtension handling that can impact service confidentiality. The available documents describe the issue and its impact but do not specify...

CVE-2024-54112

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54110

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54104

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54104

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A cross-process page stacking vulnerability exists in Huawei HarmonyOS UIExtension, which can be exploited by an attacker to compromise confidentiality...

PT-2024-36051 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The UIExtension module has a cross-process screen stack vulnerability. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment,...

PT-2024-36043 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-36036 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-36052 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

AMD Client UEFI – Cross-Process Information Leak

AMD has informed HP of a potential security vulnerability identified in some AMD client processors, which might allow information disclosure. AMD released firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. HP has identified affect...

PT-2024-30811 · Jamf · Jamf Compliance Editor

Name of the Vulnerable Software and Affected Versions: Jamf Compliance Editor versions prior to 1.3.1 Description: The issue concerns a local privilege escalation in the XPC service within the audit functionality of Jamf Compliance Editor on macOS. Recommendations: For versions prior to 1.3.1,...

CentOS 9 : linux-firmware-20230726-138.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the linux- firmware-20230726-138.el9 build changelog. - Cross-Process Information Leak rhbz 2227156 CVE-2023-20593 Note that Nessus has not tested for this issue but has instead relied only...

Moderate: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this upda...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...