CVE-2024-56957

CVE-2024-56957 affects Kingsoft WPS Office for iOS 12.20.0. Affected component: WPS Office iOS link handling. Root cause per connected data: an attacker can induce access to sensitive user information by supplying a crafted link. Exploitation characteristics from CVSS: Network attack vector, low ...

CVE-2024-56963

CVE-2024-56963 affects Beijing Sogou Technology Development Co., Ltd Sogou Input for iOS 12.2.0. Affected component appears to be the input application where a crafted link can cause disclosure of sensitive user information. The vulnerability’s impact is described as high confidentiality risk wit...

CVE-2024-56972

CVE-2024-56972 concerns Midea Home for iOS version 9.3.12. The available documents describe a vulnerability that allows an attacker to access sensitive user information by supplying a crafted link. No concrete exploit details are provided in the sources. Some entries note that there is no informa...

CVE-2024-56964

CVE-2024-56964 affects Guazi Used Car iOS 10.15.1. The connected sources indicate that an attacker can access sensitive user information by supplying a crafted link, implying a vulnerability in how links trigger data exposure. The base CVSS metrics in the Initial document show a Medium severity (...

CVE-2024-56950

CVE-2024-56950 affects KuGou Concept for iOS (version 4.0.61). The issue allows attackers to access sensitive user information by sending a crafted link. Public details describe the vulnerability mechanism as a crafted link but do not include explicit exploit code or practical exploit steps. Some...

New iOS Security Feature Makes It Harder for Police to Unlock Seized Phones

Everybody is reporting about a new security iPhone security feature with iOS 18: if the phone hasn't been used for a few days, it automatically goes into its "Before First Unlock" state and has to be rebooted. This is a really good security feature. But various police departments don't like it,...

CVE-2024-44261

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen...

CVE-2024-44180

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen...

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2024-36715)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for iOS, which can be exploited by attackers to execute Javascript commands in the browser...

CVE-2024-40818

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker with physical access may be able to use Siri to access sensitive user data...

CVE-2024-27807

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5. An app may be able to circumvent App Privacy Report logging...

How to turn off location tracking on iOS and iPadOS

On iOS and iPadOS, location services are typically turned on when you first set up your device. However, there may be reasons why you don’t want your device to be located, perhaps because you don’t want to be found but need to keep the device with you. There are a few options to hide your locatio...

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2024-25613)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for iOS due to a Javascript URL being loaded when dragging to the address bar. An attacker can exploit the vulnerability to bypass restrictions...

Mozilla Firefox for iOS Security Bypass Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for iOS due to an inability to replace the security icon with the mixed content security status if an insecure element is added to a page after...

CVE-2024-23240

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication...

Google Chrome Security Bypass Vulnerability (CNVD-2024-07840)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from insufficient policy enforcement in the iOS Security UI module. An attacker can exploit this vulnerability to bypass security restrictions...

Chromium: CVE-2024-0804 Insufficient policy enforcement in iOS Security UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Fedora 38 : chromium (2024-e42978d12c)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e42978d12c advisory. update to 121.0.6167.85 High CVE-2024-0807: Use after free in WebAudio High CVE-2024-0812: Inappropriate implementation in Accessibility High...

CVE-2024-0804

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-0804

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...