Lucene search
+L

1521 matches found

Schneier on Security
Schneier on Security
added 2017/08/21 11:57 a.m.58 views

iOS 11 Allows Users to Disable Touch ID

A new feature in Apple's new iPhone operating system -- iOS 11 -- will allow users to quickly disable Touch ID. A new setting, designed to automate emergency services calls, lets iPhone users tap the power button quickly five times to call 911. This doesn't automatically dial the emergency servic...

6.7AI score
SaveExploits0
ThreatPost
ThreatPost
added 2017/08/17 8:32 p.m.14 views

Hacker Publishes iOS Secure Enclave Firmware Decryption Key

A hacker Thursday afternoon published what he says is the decryption key for Apple iOS’ Secure Enclave Processor SEP firmware. The hacker, identified only as xerub, told Threatpost that the key unlocks only the SEP firmware, and that this would not impact user data. “Everybody can look and poke a...

6.5AI score
SaveExploits0References6
NVD
NVD
added 2017/08/16 3:29 p.m.17 views

CVE-2017-6421

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

8.8CVSS8.6AI score0.00513EPSS
SaveExploits0References3
Prion
Prion
added 2017/08/16 3:29 p.m.17 views

Buffer overflow

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation...

10CVSS8.9AI score0.0307EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2017/08/16 3:29 p.m.19 views

Buffer overflow

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

5.8CVSS8.7AI score0.00513EPSS
SaveExploits0References3
CVE
CVE
added 2017/08/16 3:0 p.m.79 views

CVE-2017-8248

CVE-2017-8248 affects Apple iPhone 5 and later, iPad 4th generation and later, and iPod touch 6th generation. The Telephony component’s downlink NAS message processing has a buffer overflow vulnerability, enabling a remote attacker in a privileged network position to execute arbitrary code. Apple...

10CVSS8.9AI score0.0307EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2017/08/16 3:0 p.m.24 views

CVE-2017-6421

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

8.6AI score0.00513EPSS
SaveExploits0References3
CVE
CVE
added 2017/08/16 3:0 p.m.55 views

CVE-2017-6421

CVE-2017-6421 describes an elevation-of-privilege vulnerability in the Qualcomm MStar touchscreen driver affecting Qualcomm-based Android devices. The issue arises in the touch controller function where a variable is user-controlled, enabling a buffer overflow. Public details indicate the vulnera...

8.8CVSS8.5AI score0.00513EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.8 views

The vulnerability of the Multi-Touch component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Multi-Touch component in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

9.3CVSS8AI score0.0113EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.10 views

The vulnerability of the Multi-Touch component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Multi-Touch component in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

9.3CVSS7.9AI score0.0113EPSS
SaveExploits0References2Affected Software1
Huawei
Huawei
added 2017/06/12 12:0 a.m.26 views

Security Advisory - Memory Double Free Vulnerability in Touch Panel Driver of Some Huawei Smart Phones

The Touch Panel TP driver of some Huawei smart phones has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which coul...

9.3CVSS7.8AI score0.01015EPSS
SaveExploits0Affected Software1
Apple
Apple
added 2017/06/01 8:39 a.m.50 views

About the security content of iOS 10.3.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

7.2CVSS7.9AI score0.00537EPSS
SaveExploits3Affected Software1
CNVD
CNVD
added 2017/05/23 12:0 a.m.6 views

Apple macOS Sierra Multi-Touch Memory Corruption Vulnerability (CNVD-2017-08146)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra Multi-Touch suffers from a memory corruption vulnerability that can be exploited by remote attackers to build malicious apps and elevate privileges...

9.3CVSS6.9AI score0.0113EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/22 5:29 a.m.4 views

CVE-2017-2543

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS7.6AI score0.0113EPSS
SaveExploits0References2
OSV
OSV
added 2017/05/22 5:29 a.m.3 views

CVE-2017-2542

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS6.1AI score0.0113EPSS
SaveExploits0References2
NVD
NVD
added 2017/05/22 5:29 a.m.18 views

CVE-2017-2543

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

9.3CVSS7.3AI score0.0113EPSS
SaveExploits0References2
Prion
Prion
added 2017/05/22 5:29 a.m.17 views

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

9.3CVSS7.1AI score0.0113EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2017/05/22 5:29 a.m.19 views

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

9.3CVSS7.1AI score0.0113EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2017/05/22 4:54 a.m.57 views

CVE-2017-2542

CVE-2017-2542 affects macOS Sierra (and earlier) with the Multi-Touch component. A memory corruption issue in Multi-Touch allows a crafted app to run code with kernel-level privileges or cause a denial of service. Affected: macOS before 10.12.5. Impact: local arbitrary-code execution with kernel ...

9.3CVSS7.7AI score0.0113EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2017/05/22 4:54 a.m.56 views

CVE-2017-2543

CVE-2017-2543 affects macOS Sierra (10.12.x)

9.3CVSS7.7AI score0.0113EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder