Lucene search
+L

9421 matches found

OSV
OSV
added 2023/10/25 7:15 p.m.5 views

CVE-2023-41988

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

6.8CVSS7AI score0.00524EPSS
SaveExploits0References9
Prion
Prion
added 2023/10/25 7:15 p.m.30 views

Information disclosure

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

4.6CVSS5.9AI score0.00524EPSS
SaveExploits0References9Affected Software4
Prion
Prion
added 2023/10/25 7:15 p.m.31 views

Information disclosure

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

2.1CVSS4.6AI score0.00457EPSS
SaveExploits0References12Affected Software4
Vulnrichment
Vulnrichment
added 2023/10/25 6:32 p.m.20 views

CVE-2023-41988

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

5.6AI score0.00524EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2023/10/25 6:32 p.m.41 views

CVE-2023-41988

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

6.3AI score0.00524EPSS
SaveExploits0References9
CVE
CVE
added 2023/10/25 6:32 p.m.275 views

CVE-2023-41988

CVE-2023-41988 concerns an issue where an attacker with physical access could use Siri to access sensitive user data on locked devices. The fixed behavior is to restrict options offered on a locked device. Affected/affected-by details in the provided documents indicate remediation in macOS Sonoma...

6.8CVSS6AI score0.00524EPSS
SaveExploits0References9Affected Software4
CVE
CVE
added 2023/10/25 6:31 p.m.290 views

CVE-2023-41982

CVE-2023-41982 affects Apple devices where an attacker with physical access can use Siri from a locked device to access sensitive user data. The issue is addressed by restricting options offered on a locked device and is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, and ...

4.6CVSS4.7AI score0.00457EPSS
SaveExploits0References12Affected Software4
Vulnrichment
Vulnrichment
added 2023/10/25 6:31 p.m.33 views

CVE-2023-41997

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

5.6AI score0.00457EPSS
SaveExploits0References12
Cvelist
Cvelist
added 2023/10/25 6:31 p.m.35 views

CVE-2023-41997

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data...

5.2AI score0.00457EPSS
SaveExploits0References12
OSV
OSV
added 2023/10/25 6:17 p.m.13 views

AZL-31685 CVE-2023-4693 affecting package grub2 for versions less than 2.06-13

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to...

4.6CVSS5.8AI score0.00496EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/10/25 12:00 a.m.9 views

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from the fact that an attacker with physical access rights may be able to use Siri to access sensitive user data...

4.6CVSS6.1AI score0.00457EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2023/10/25 12:00 a.m.4 views

PT-2023-7014 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and 17.1 iPadOS versions prior to 16.7.2 and 17.1 Description: The issue is related to insufficient access control in the Siri personal assistant, which...

4.9CVSS5.1AI score0.00457EPSS
SaveExploits0References20
CNNVD
CNNVD
added 2023/10/25 12:00 a.m.14 views

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from the fact that an attacker with physical access rights may be able to use Siri to access sensitive user data...

6.8CVSS6.1AI score0.00524EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2023/10/25 12:00 a.m.11 views

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from the fact that an attacker with physical access rights may be able to use Siri to access sensitive user data...

4.6CVSS6.1AI score0.00457EPSS
SaveExploits0References15
OSV
OSV
added 2023/10/19 8:15 p.m.10 views

CVE-2023-30633

An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malware activity. Devices use Platform Configuration Registers PCRs to record information about device and software configuration to ensure that the boot...

5.3CVSS6.4AI score0.00212EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/19 8:15 p.m.18 views

CVE-2023-30633

An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malware activity. Devices use Platform Configuration Registers PCRs to record information about device and software configuration to ensure that the boot...

6.1CVSS6.1AI score0.00865EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/17 2:15 p.m.32 views

Input validation

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...

4.3CVSS7.8AI score0.0046EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/10/13 5:15 p.m.36 views

CVE-2023-5409

HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible to a physical attack, allowing an untrusted source to tamper with the system firmware using a publicly disclosed private key. HP is providing recommended guidance for customers t...

6.8CVSS6.5AI score0.00293EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/13 5:15 p.m.25 views

Design/Logic Flaw

HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible to a physical attack, allowing an untrusted source to tamper with the system firmware using a publicly disclosed private key. HP is providing recommended guidance for customers t...

4.6CVSS6.5AI score0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/13 4:15 p.m.44 views

CVE-2023-5409

HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible to a physical attack, allowing an untrusted source to tamper with the system firmware using a publicly disclosed private key. HP is providing recommended guidance for customers t...

6.7AI score0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder