CVE-2023-41320 Account takeover via SQL Injection in UI layout preferences in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. UI layout preferences management can be hijacked to lead to SQL injection. This injection can be use to...

CVE-2023-41079

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41079

CVE-2023-41079 affects macOS Sonoma 14 where an app may bypass Privacy preferences due to flawed permissions logic. The issue is fixed in macOS Sonoma 14 (Apple HT213940). Public references describe a local bypass of Privacy/TCC controls with no listed exploit details. The NVD entry mirrors the d...

CVE-2023-41079

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-41078

CVE-2023-41078 is an authorization/privacy issue addressed in macOS Sonoma 14. The vulnerability involves an app potentially bypassing certain Privacy preferences due to flawed state management, and Apple’s fix is included with Sonoma 14. Connected documents consistently describe the root cause a...

CVE-2023-40426

CVE-2023-40426 affects macOS Sonoma 14. A permissions issue may allow an app to bypass certain Privacy preferences. The issue is fixed in macOS Sonoma 14. Remediation: update to macOS Sonoma 14 or later. Technical detail: described as a privacy/permissions bypass; no explicit exploit details prov...

CVE-2023-40426

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-40426

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-41980

CVE-2023-41980 describes a permissions issue that could allow an app to bypass Privacy preferences. Public details confirm impact on Apple platforms including iOS 17, iPadOS 17, and macOS Sonoma 14, with the issue fixed in those releases. The vulnerability is tracked across multiple Apple advisor...

CVE-2023-41980

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41980

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...

PT-2023-27772 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: An authorization issue was addressed with improved state management, allowing an app to potentially bypass certain Privacy preferences. Recommendations: For versions prior to 14, update to macOS Sonoma ...

PT-2023-27446 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to bypass certain Privacy preferences. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from an application that may be able to bypass...

PT-2023-28201 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences...

firefox security update

102.15.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.15.1-1 - Update to 102.15.1...

Authentication flaw

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. An app may be able to bypass Privacy preferences...

CVE-2023-32438

CVE-2023-32438 concerns a privacy-bypass issue in Apple platforms. The vulnerability could allow an app to bypass Privacy preferences due to insufficient checks, with the issue fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. The impact is described as an unauthorize...