11 matches found
EUVD-2023-25110
Malicious code in bioql PyPI...
EUVD-2023-25430
Malicious code in bioql PyPI...
CVE-2024-0019
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2023-20934
In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2024-54493
CVE-2024-54493 corresponds to a privacy-indicator issue for microphone access in macOS prior to 15.2, resolved by improved state management. The affected product is macOS Sequoia, with the fix released in Sequoia 15.2. The root cause is described as incorrect attribution of microphone-access indi...
CVE-2024-54493
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...
Design/Logic Flaw
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
CVE-2023-21278
In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21262
In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation...
Code injection
In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2023-18045 · Unknown · Audiopolicyinterfaceimpl
Name of the Vulnerable Software and Affected Versions: AudioPolicyInterfaceImpl affected versions not specified Description: A race condition in the startInput function of AudioPolicyInterfaceImpl.cpp may cause the microphone privacy indicator to be displayed incorrectly, potentially leading to...