PT-2024-13611 · Google · Google Pixel Watch

Name of the Vulnerable Software and Affected Versions: Google Pixel Watch affected versions not specified Description: The issue is related to a possible way to access adb before SUW completion due to an insecure default value in the checkDebuggingDisallowed function of DeviceVersionFragment.java...

Google Pixel Watch 安全漏洞

Google Pixel Watch is a smartwatch from the American company Google Google. Google Pixel Watch has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability in the kernel of operating systems macOS, iOS, iPadOS, tvOS, and watchOS allows a hacker to bypass security restrictions.

The vulnerability in the kernels of operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

PT-2023-31410 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.17.16 Elasticsearch versions prior to 8.11.2 Description: An issue was discovered whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents...

DEBIAN-CVE-2023-42883

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. Processing an image may lead to a denial-of-service...

PT-2023-28642 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 watchOS versions prior to 10.2 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow ...

PT-2023-8869

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 tvOS versions prior to 17.2 watchOS versions prior to 10.2 macOS Sonoma versions prior to 14.2 Description A use after free issue was addressed with improve...

Pixel Watch Security Bulletin—December 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2023-12-05 or later address all applicable issues in the December 2023 Android Security Bulletin and all issues in this bulleti...

PT-2023-28630 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.7.2 macOS Ventura versions prior to 13.6.3 iOS versions prior to 17.2 iPadOS versions prior to 17.2 iOS versions prior to 16.7.3 iPadOS versions prior to 16.7.3 tvOS versions prior to 17.2 watchOS versions...

About the security content of watchOS 10.2

About the security content of watchOS 10.2 This document describes the security content of watchOS 10.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

PT-2023-8681 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.5 and 17.2 iPadOS versions prior to 16.7.5 and 17.2 watchOS versions prior to 10.2 macOS Ventura versions prior to 13.6.4 macOS Sonoma versions prior to 14.2 macOS Monterey versions prior to 12.7.3 Description: The...

The vulnerability of the Intel SoC Watch energy consumption analysis software lies in the overflow of the heap-based buffers, allowing attackers to exploit their privileges.

The vulnerability of the Intel SoC Watch energy consumption analysis software is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges...

Android Security Bulletin—December 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

kernel: watch_queue: Fix NULL dereference in error cleanup

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix NULL dereference in error cleanup In watchqueuesetsize, the error cleanup code doesn't take account of the fact that freepage can't handle a NULL pointer when trying to free up buffer pages that did get allocated...

kernel: watch_queue: Actually free the watch

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Actually free the watch freewatch does everything barring actually freeing the watch object. Fix this by adding the missing kfree. kmemleak produces a report something like the following. Note that as an address can b...

Apple Security Update: watchOS 10.1.1

Apple recommends to install security update watchOS 10.1.1 on devices Apple Watch Series 4 and later...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-3007

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

The vulnerability of the kernel of operating systems such as watchOS, iPadOS, iOS, and macOS lies in the operation of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the kernel of watchOS, iPadOS, and iOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS stems from insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...