59 matches found
CVE-2024-54485
A security vulnerability exists in iOS , iPadOS , and macOS Sequoia that allows an attacker with physical access to an iOS device to view notification content from the lock screen. The underlying cause relates to the insecure storage of sensitive information (CWE-922). This issue has been address...
CVE-2024-54485
The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...
Some keyboard shortcuts may not work when external Windows keyboard is used along with CWA for iOS
When using external Windows keyboard attached to iOS device, you may not be able to use some keyboard shortcut combinations in Citrix session. Examples: Use of 'Windows key' may not give desired result. Cannot highlight multiple items files in explorer or cells in a spreadsheet by keeping 'Ctrl'...
In search of the Triangulation: triangle_check utility
In our initial blogpost about "Operation Triangulation", we published a comprehensive guide on how to manually check iOS device backups for possible indicators of compromise using MVT. This process takes time and requires manual search for several types of indicators. To automate this process, we...
Exploit for Race Condition in Apple Safari
Mandela Rewritten iOS customization app powered by CVE-202...
WhatIsMyUDID: Cross-site Scripting Vulnerability
whatismyudid is a Node.js application by the individual developer of chedabob. It displays the UDID of an iOS device via Mobile Config. Whatismyudid has a security vulnerability in the exports.enrollment function in the file routes/mobileconfig.js, which can be manipulated to cause cross-site...
CVE-2022-26703
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS device may be able to access photos from the lock screen...
Code injection
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...
CVE-2021-1755
CVE-2021-1755 describes a lock-screen access issue that could allow access to contacts on a locked device (iOS and macOS contexts in the sources). The vulnerability is addressed with improved state management and is fixed in macOS Big Sur 11.0.1. Connected records confirm the incident involves lo...
CVE-2020-13767: Undefined Security Weakness
The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and if successful could allow an attacker to gain access to sensitive information,...
Secure web on iOS devices getting error: Cannot Open Page too many HTTP redirects
When user opens web link with secure web on iOS devices, below error comes up. Error:Cannot Open Page too many HTTP redirects. Secure web log from iOS device: ==================== NSLocalizedDescription = "too many HTTP redirects"; NSUnderlyingError = "Error Domain=kCFErrorDomainCFNetwork...
About the security content of watchOS 6.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
CVE-2020-9848
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...
Code injection
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled...
About the security content of watchOS 6.2
About the security content of watchOS 6.2 This document describes the security content of watchOS 6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2019-8775
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...
CVE-2019-8742
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen...
CVE-2019-8775
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...
