The vulnerability of the web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content...

CVE-2021-25423

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log...

CVE-2021-25422

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25423

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log...

CVE-2021-25420

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25422

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25420

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

Input validation

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25420

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

Input validation

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25423

The CVE-2021-25423 entry concerns Samsung Watch Active2 PlugIn before version 2.2.08.21033151, where improper log management can cause a logged Wi‑Fi password from the user’s smartphone to be leaked by attackers with log permissions. Affected component is the Watch Active2 PlugIn (Sony?) on weara...

CVE-2021-25420

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25422

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25423

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log...

CVE-2021-25422

CVE-2021-25422 affects Samsung Watch Active PlugIn prior to version 2.2.07.21033151. The issue is described as an improper log management flaw that allows an attacker with log permissions to exfiltrate the Wi‑Fi password of a connected smartphone via logs. Documents consistently identify the affe...

CVE-2021-25420

CVE-2021-25420 affects Galaxy Watch PlugIn before version 2.2.05.21033151. Root cause: improper log management. Impact: an attacker with log permissions can leak the Wi‑Fi password connected to the user’s smartphone via logs. Remediation: upgrade to 2.2.05.21033151 or newer (per provided document...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. The Watch Active2 PlugIn version 2.2.08.21033151 previously contained a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a user's smartphone connection via logs...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. Watch Active PlugIn prior to version 2.2.07.21033151 suffers from a security vulnerability that can be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's smartphone in a log...

Samsung Galaxy Watch PlugIn 日志信息泄露漏洞

Samsung Galaxy Apps is a pre-installed application store program for Samsung mobile devices from Samsung South Korea. Galaxy Watch PlugIn 2.2.05.21033151 previously had a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's...

PT-2021-5441 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved state management, which could allow a...