openSUSE Security Update : spectre-meltdown-checker (openSUSE-2019-2710)

This update for spectre-meltdown-checker fixes the following issues : - feat: implement TAA detection CVE-2019-11135 bsc1139073 - feat: implement MCEPSC / iTLB Multihit detection CVE-2018-12207 bsc1117665 - feat: taa: add TSXCTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub...

Unspecified Vulnerability in Apple iOS Status Bar Component

Apple iOS is an operating system for mobile devices developed by Apple Inc.Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in Apple iOS versions prior to 12.3. An attacker could exploit the vulnerability to display a locked icon after...

CVE-2019-8742

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2019-8730

The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes...

CVE-2019-8730

The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes...

CVE-2019-8537

An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes...

CVE-2019-8537

An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes...

Design/Logic Flaw

An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes...

CVE-2019-8742

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2019-8730

CVE-2019-8730 affects macOS Notes on macOS Catalina. The issue allowed a local attacker to view a user’s locked notes because contents could appear in search results. Apple fixed the issue as part of Catalina 10.15 via improved data cleanup. Public references confirm the vulnerability description...

CVE-2019-8537

An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes...

DEBIAN-CVE-2019-19807

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to sndtimeropen and sndtimercloselocked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a...

CVE-2019-5252

There is an improper authentication vulnerability in Huawei smartphones Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro. The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant...

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a locked screen...

Multiple Huawei products licensing issues vulnerabilities

The Huawei Y9, among others, is a smartphone from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in several Huawei products, which can be exploited by an attacker to use a locked application in a very short period of time...

kernel: denial of service vector through vfio DMA mappings

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhausti...

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

Apple macOS Catalina Notes Component Information Disclosure Vulnerability

Apple macOS Catalina is a special operating system developed by Apple for Mac computers.Notes is one of the memo components. A security vulnerability exists in the Notes component of Apple macOS Catalina prior to version 10.15, which stems from locked notes sometimes appearing in search results. ...

Security feature bypass

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen, aka 'Windows 10 Mobile Security Feature Bypass Vulnerability'...

Apple iOS Messages Component Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is an application component for sending text, photos and videos. An information disclosure vulnerability exists in the Messages component in versions of Apple iOS prior to 13, which can be exploited by an attacke...