Design/Logic Flaw

discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may be able to access sensitive user data...

CVE-2023-41994

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

CVE-2023-40430

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access removable volumes without user consent...

CVE-2023-40433

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

CVE-2022-42816

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...

Code injection

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

Improper access control

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...

CVE-2022-42816

CVE-2022-42816 is a macOS vulnerability described as a logic issue related to state management. According to the provided sources, it is addressed in macOS Ventura 13, and the issue could allow an app to modify protected parts of the file system. The primary publicly available details identify th...

CVE-2022-42816

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...

CVE-2022-42816

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...

CVE-2022-46710

CVE-2022-46710 covers a logic issue in iCloud Photo Library where Location data may be shared via iCloud links even if Location metadata is disabled in the Share Sheet. Affected: iOS 16.2, iPadOS 16.2, and macOS Ventura 13.1 (and related Apple security content). Root cause: improper checks around...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...

CVE-2023-41994

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...

CVE-2023-41994

CVE-2023-41994 affects macOS via a logic issue in CoreMedia where a camera extension may access the camera view from apps other than the one granted permission. The issue is fixed in macOS Sonoma 14. Root cause: insufficient access checks in CoreMedia. Impact: potential exposure of camera view; e...

CVE-2023-40433

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...

CVE-2023-40433

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...

CVE-2023-40433

CVE-2023-40433 is a logic-issue vulnerability in macOS Ventura that may allow an app to bypass Gatekeeper checks. The issue is fixed in macOS Ventura 13.3. The available documents identify the affected product as macOS Ventura and describe the root cause as a logic issue that enables Gatekeeper b...