2023

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a malicious

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.4 and iPadOS 1

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to modify

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catal

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to ex

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious applic

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processi

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.

In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion d

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted fil

In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This co

In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could

In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission che

In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code executio

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deput

In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device featur

In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deput

In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This cou

In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a lo

In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaust

In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to

In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the c

In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec

In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could l

In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l

In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead

In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This c

In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options with

In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remot

In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.

In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-expo

In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadc

In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions

PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v

SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place.

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets.

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWire

Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet fun