CVE-2021-25420

CVE-2021-25420 affects Galaxy Watch PlugIn before version 2.2.05.21033151. Root cause: improper log management. Impact: an attacker with log permissions can leak the Wi‑Fi password connected to the user’s smartphone via logs. Remediation: upgrade to 2.2.05.21033151 or newer (per provided document...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. The Watch Active2 PlugIn version 2.2.08.21033151 previously contained a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a user's smartphone connection via logs...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. Watch Active PlugIn prior to version 2.2.07.21033151 suffers from a security vulnerability that can be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's smartphone in a log...

Samsung Galaxy Watch PlugIn 日志信息泄露漏洞

Samsung Galaxy Apps is a pre-installed application store program for Samsung mobile devices from Samsung South Korea. Galaxy Watch PlugIn 2.2.05.21033151 previously had a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's...

PT-2021-5441 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved state management, which could allow a...

PT-2021-5440 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved validation, which could allow a malicious...

PT-2021-5767 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 14.1.1 tvOS versions prior to 14.6 iOS versions prior to 14.6 iPadOS versions prior to 14.6 macOS Big Sur versions prior to 11.4 watchOS versions prior to 7.5 Description: The issue is related to multiple memory...

webkitgtk: Input validation issue leading to cross site scripting attack

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple, Inc. There is a security vulnerability in watchOS that stems from a kernel component copying files that may not have the expected file permissions. A local user could abuse this behavior to escalate privileges on the system. The...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in watchOS, which originates in the MobileInstallation component. A local user can modify protected portions of the file system and escalate privileges. The vulnerability allows a local user to...

Apple watchOS 缓冲区错误漏洞

Apple watchOS is an operating system for smartwatches from Apple. A buffer error vulnerability exists in watchOS due to a boundary condition within the kernel. The following products and versions are affected: watchOS: 7.0 18R382, 7.0.1 18R395, 7.0.2 18R402, 7.0.3 18R410, 7.1 18R590, 7.2 18S564,...

PT-2021-7320 · Apple +7 · Macos Monterey +12

Name of the Vulnerable Software and Affected Versions: WPE WebKit versions prior to the fixed version iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS...

PT-2021-7334 · Apple +9 · Ipados +13

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.0.1 iOS versions prior to 15.1 iPadOS versions prior to 15.1 watchOS versions prior to 8.1 tvOS versions prior to 15.1 Description: A logic issue was addressed with improved restrictions. Processing...

CVE-2021-1801

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2021-1793

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2020-9967

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A remote attacker may be able to...

CVE-2020-27951

This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation...

CVE-2021-1776

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitra...

CVE-2021-1787

Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges...