CVE-2021-0315

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

CVE-2021-0315

CVE-2021-0315 is an Android elevation-of-privilege issue described as a tapjacking/overlay-based flaw in GrantCredentialsPermissionActivity.java. Affected products/versions include Android 8.0, 8.1, 9, 10, and 11. The root cause is user interaction via a deceptive overlay, enabling local privileg...

CVE-2020-27059

In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's fingerprint due to an overlaid window. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-169763814

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

The vulnerability of the Overlay Filter component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Overlay Filter component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2020-0099

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Default configuration

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0099

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0099

CVE-2020-0099 affects Android 8.0–10 and involves the WindowManagerService.addWindow, with an insecure default value enabling a possible window overlay attack (tapjacking) leading to local privilege escalation. Exploitation requires user interaction in the documented reports, and the issue is cat...

CVE-2020-17139

Windows Overlay Filter Security Feature Bypass Vulnerability...

CVE-2020-17139

Windows Overlay Filter Security Feature Bypass Vulnerability...

Security feature bypass

Windows Overlay Filter Security Feature Bypass Vulnerability...

CVE-2020-17139 Windows Overlay Filter Security Feature Bypass Vulnerability

...

CVE-2020-17139

CVE-2020-17139 affects Windows file-system mini-filter drivers (notably the Windows Overlay Filter, WOF). The vulnerability arose from OS-added IO control/FSCTL handling changes (FSCTL_SET_REPARSE_POINT_EX) that WOF did not handle, enabling an application to attach or remove WOF IO tags and there...

SUSE SLES15 Security Update : podman (SUSE-SU-2020:3378-1)

This update for podman fixes the following issues : Security issue fixed : This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API bsc1176804. Non-security issues fixed : add dependency to timezone package or podman fai...

Windows Overlay Filter Security Feature Bypass Vulnerability

...

Microsoft Windows Overlay Filter Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Overlay Filter. The following products and versions are affected:Windows Server, version 2004 Server Core...

PT-2020-5234 · Microsoft · Windows Overlay Filter +1

Name of the Vulnerable Software and Affected Versions: Windows Overlay Filter affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Overlay Filter component. This can allow an attacker to impact the confidentiality, integrit...

openSUSE Security Update : buildah (openSUSE-2020-2106)

This update for buildah fixes the following issues : buildah was updated to v1.17.0 bsc1165184 : - Handle cases where other tools mount/unmount containers - overlay.MountReadOnly: support RO overlay mounts - overlay: use fusermount for rootless umounts - overlay: fix umount - Switch default log...

ASB-A-141745510

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation...