CVE-2023-30706

CVE-2023-30706 affects Samsung Keyboard prior to SMR Sep-2023 Release 1, where improper authorization could allow a user with system privileges to read arbitrary files. The issue is tied to Samsung Keyboard in Samsung mobile devices; root cause described as improper authorization. Impact stated i...

CVE-2023-30706

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices SMR Sep-2023 Release 1 version, which stemmed from improper authorization in Samsung...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2023 Release 1 prior to version 1, which stems from an incorrect input validation vulnerabili...

CVE-2023-21667

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

Code injection

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

CVE-2023-21667

CVE-2023-21667 describes a transient DoS in the Bluetooth HOST when passing a descriptor to validate a blacklisted Bluetooth keyboard. The vulnerability is referenced in Qualcomm’s Bluetooth context (QC-CR#3306293) and appears in multiple feeds (NVD and Red Hat entries) with a base CVSS v3.1 scor...

CVE-2023-21667 Buffer Over-read in Bluetooth HOST

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

PT-2023-22907 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Sep-2023 Release 1 Description: The issue is related to an improper input validation vulnerability in the FileProviderStatusReceiver component of the Samsung Keyboard. This vulnerability allows local...

PT-2023-22906 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper authorization, allowing an attacker to read arbitrary files with system privilege. Recommendations: For versions prior to SMR Sep-2023...

PT-2023-18329 · Unknown · Bluetooth Host

Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Bluetooth HOST. It occurs when passing a descriptor to validate a blacklisted Bluetooth keyboard. There is no...

CapsLock and Eisu keys on Japanese 106 keyboard are not working on VDA

When end users connect a Japanese 106 keyboard to the machine where CWA Linux installed and select Scancode mode in Citrix Linux, the extra keys in a Japanese 106 keyboard might not work on VDA. The Caps Lock or Eisu 英数 key is a special key that has different functions in different keyboard layou...

Mouse & Keyboard might show Delay/Stops Working when using High DPI Mouse in Citrix sessions

Users using high DPI mouse and connect to a Citrix published desktop or applications both mouse and keyboard stops working. Sometimes mouse is working 4-5 seconds before it stops working. Users see a delay in Display update i.e. when moving Windows as the delay of up to 5-10 seconds after stoppin...

Keyboard layout sync failures due to Microsoft API limitation

Symptom 1: In a Windows Server VDA session the keyboard layout might not sync with the client keyboard layout when launching session with the "Sync only once - when the session launches" in the Citrix Workspace App Windows/Linux/Mac keyboard setting. Symptom 2: In a Windows 10/11, Windows Server...

CVE-2023-21177

In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2023-17965 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the requestAppKeyboardShortcuts function of WindowManagerService.java. This could allow an attacker to infer the app a user is interacting with,...

June 27, 2023—KB5027293 (OS Build 19045.3155) Preview

None None...

CVE-2023-29546

When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information. This bug only affects Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox for Android 112...

UBUNTU-CVE-2023-29546

When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information. This bug only affects Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox for Android 112...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that originates when the address bar and keyboard are not hidden when recording a screen via private browsing, which can be exploite...