Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data...

Design/Logic Flaw

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.1. An app may be able to access protected user data...

Design/Logic Flaw

The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen...

Design/Logic Flaw

The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persistently fail to lock...

Design/Logic Flaw

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver...

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution...

CVE-2023-42852

CVE-2023-42852 is a WebKitGTK/WebKitGTK4 vulnerability described as a logic issue where processing web content may lead to arbitrary code execution. Affected products include the WebKitGTK/WebKitGTK4 stack; the issue is fixed in WebKitGTK/WebKitGTK4 updates (examples: AL2 ALAS advisory references...

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution...

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution...

CVE-2023-42861

A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac...

CVE-2023-42861

CVE-2023-42861 affects macOS (Login Window) with a logic issue that allowed unlocking another standard user’s locked screen on the same Mac. The vulnerability is addressed in macOS Sonoma 14.1, per Red Hat/NVD/NCSC Apple advisories in the connected documents. Practical impact is limited to scenar...

CVE-2023-42850

CVE-2023-42850: A macOS Sonoma 14.1 issue where LaunchServices’ permissions logic could allow an app to access sensitive user data. The vulnerability is fixed in macOS Sonoma 14.1; affected product is macOS Sonoma (LaunchServices). The NVD entry indicates a local attack vector with low attack com...

CVE-2023-42847

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication...

CVE-2023-42847

CVE-2023-42847 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. The issue allowed access to passkeys without authentication due to insufficient checks. Affected products: macOS Sonoma 14.1+, iOS 17.1, iPadOS 17.1. Impact, as stated: an attacker may ac...

CVE-2023-42847

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication...

Design/Logic Flaw

The leakage of the client secret in Tokueimaruwaiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

Design/Logic Flaw

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to...

Design/Logic Flaw

Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthenticated attackers...

Design/Logic Flaw

Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish arbitrary files from the Jenkins...