cve-2023-40429-ez-device-name

HostName Descripción general HostName es una aplicación de ejemplo que demuestra cómo una aplicación de terceros puede acceder al nombre de dispositivo de un usuario sin el entitlement com.apple.developer.device-information.user-assigned-device-name. Detalles En iOS 16, Apple añadió el entitlemen...

PT-2026-78679

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1 Description BuildKit is a toolkit used to convert source code into build artifacts. A custom frontend can send a crafted build request containing an invalid SecurityMode value. The executor/oci/spec linux.go...

Missing Entitlement Check

github.com/moby/buildkit is vulnerable to Missing Entitlement Check. The vulnerability due to improper validation of the security.insecure entitlement flag within the BuildKit APIs. An attacker can run a malicious container with elevated permissions as a result of this flaw...