27789 matches found
Design/Logic Flaw
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to access SSH passphrases...
Design/Logic Flaw
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to gain elevated privileges...
Design/Logic Flaw
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access removable volumes without user consent...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access sensitive user data...
Design/Logic Flaw
An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgimain function of the cgibin binary component...
Improper access control
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...
Design/Logic Flaw
A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...
CVE-2022-42816
CVE-2022-42816 is a macOS vulnerability described as a logic issue related to state management. According to the provided sources, it is addressed in macOS Ventura 13, and the issue could allow an app to modify protected parts of the file system. The primary publicly available details identify th...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2022-46710
CVE-2022-46710 covers a logic issue in iCloud Photo Library where Location data may be shared via iCloud links even if Location metadata is disabled in the Share Sheet. Affected: iOS 16.2, iPadOS 16.2, and macOS Ventura 13.1 (and related Apple security content). Root cause: improper checks around...
CVE-2022-46710
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...
CVE-2022-46710
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet...
CVE-2023-41994
CVE-2023-41994 affects macOS via a logic issue in CoreMedia where a camera extension may access the camera view from apps other than the one granted permission. The issue is fixed in macOS Sonoma 14. Root cause: insufficient access checks in CoreMedia. Impact: potential exposure of camera view; e...
CVE-2023-41994
A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission...
CVE-2023-40433
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...
CVE-2023-40433
CVE-2023-40433 is a logic-issue vulnerability in macOS Ventura that may allow an app to bypass Gatekeeper checks. The issue is fixed in macOS Ventura 13.3. The available documents identify the affected product as macOS Ventura and describe the root cause as a logic issue that enables Gatekeeper b...