CVE-2023-32417

This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attacker with physical access to a locked Apple Watch may be able to view user photos or contacts via accessibility features...

CVE-2023-32413

A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to gain root privileges...

CVE-2023-28191

This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

CVE-2023-32417

This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attacker with physical access to a locked Apple Watch may be able to view user photos or contacts via accessibility features...

CVE-2023-32417

This CVE (CVE-2023-32417) affects Apple Watch on watchOS prior to 9.5 and is resolved in watchOS 9.5. Description and Apple security content confirm that a user with physical access to a locked Apple Watch could view photos or contacts via accessibility features. The root issue is described as re...

The vulnerability of the kernel of iOS, iPadOS, watchOS, and macOS allows a perpetrator to execute arbitrary code with kernel privileges.

The vulnerability of the kernel of iOS, iPadOS, watchOS, and macOS is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges...

SUSE CVE-2023-30582

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...

PT-2023-3221

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 9.5.2 watchOS versions prior to 8.8.1 macOS Big Sur versions prior to 11.7.8 macOS Monterey versions prior to 12.6.7 macOS Ventura versions prior to 13.4.1 iOS versions prior to 15.7.7 iOS versions prior to 16.5.1...

VulnCheck KEV: CVE-2023-32434

Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges...

Pixel Watch Security Bulletin—June 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2023-06-05 or later address all applicable issues in the June 2023 Android Security Bulletin and all issues in this bulletin. T...

watch-band-center.com Cross Site Scripting vulnerability OBB-3391068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Android Security Bulletin—June 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-06-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Apple Security Update: watchOS 9.5.1

Apple recommends to install security update watchOS 9.5.1 on devices Apple Watch Series 4 and later...

The vulnerability of the GeoServices application for operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to disclose sensitive information that is protected by this application’s security measures.

The vulnerability of the GeoServices application for operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability in the kernel of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows a hacker to execute arbitrary code with root privileges.

The vulnerability in the kernels of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges...

Legion Malware Upgraded to Target SSH Servers and AWS Credentials

An updated version of the commodity malware called Legion comes with expanded features to compromise SSH servers and Amazon Web Services AWS credentials associated with DynamoDB and CloudWatch. "This recent update demonstrates a widening of scope, with new capabilities such the ability to...

PT-2023-23769 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Description: The issue allows a person with physical access to a device to view contact...

PT-2023-4789 · Apple · Apple Macos +3

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS versions prior to Ventura 13.4 Description: The issue is related to insufficient warnings about dangerous...

PT-2023-23775 · Apple · Macos Ventura +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Safari versions prior to 16.5 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description: An out-of-bounds read issue was addressed with...