CVE-2018-16262

The CVE-2018-16262 issue affects Tizen’s pkgmgr system service where an unprivileged process can perform package management actions due to improper D-Bus security policy configurations. This can enable installing, decrypting, or killing other packages. Affected platforms include Tizen up to 5.0 M...

CVE-2018-16266

The CVE-2018-16266 issue affects the Enlightenment system service in Tizen, where improper D-Bus security policy configurations allow an unprivileged process to fully control or capture windows. Affected: Tizen before 5.0 M1 and Tizen-based firmwares (e.g., Samsung Galaxy Gear) before build RE2. ...

CVE-2018-16267

The CVE affects Tizen’s system-popup service, where an unprivileged process can trigger popup actions and the power-off menu due to insecure D-Bus policy configurations. Affected versions include Tizen before 5.0 M1 and Tizen-based devices (e.g., Samsung Galaxy Gear series) before build RE2. Root...

CVE-2018-16263

The CVE-2018-16263 entry concerns the PulseAudio system service on Tizen. The vulnerability arises from improper D-Bus security policy configurations that allow an unprivileged process to control the A2DP MediaEndpoint. Affected products include Tizen releases before 5.0 M1 and Tizen-based firmwa...