Archive
14 August 2023
Vulnerabilities first published on this day (UTC), newest first.
136 results · Feed
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
High 8.8CVE-2022-48503 Exploited
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS…
KEV Oct 20, 2025 -
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Process…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious appli…
-
Unscored —
A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Cata…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
Unscored —
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …
-
Unscored —
An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 an…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to modify…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciou…
-
Unscored —
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue i…
-
Unscored —
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventu…
-
Low 2.4
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.4 and iPadOS …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
Unscored —
In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions…
-
Unscored —
In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broad…
-
Unscored —
In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exp…
-
Unscored —
In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass.…
-
Medium 5.8
lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files
### Impact The browser renders the resulting HTML when opening a direct link to an HTML file via lakeFS. Any JavaScript within that page is executed within the context of the domain lakeFS is running in. An attacker can inject a malicious script inline, downl…
-
Unscored —
In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remo…
-
Unscored —
In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options wit…
-
Unscored —
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existin…
-
Unscored —
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion …
-
Unscored —
In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted fi…
-
Unscored —
In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This c…
-
Unscored —
In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This coul…
-
Unscored —CVE-2023-21288 Public exploit
In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission ch…
-
Unscored —
In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code executi…
-
Unscored —CVE-2023-21286 Public exploit
In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission che…
-
Unscored —CVE-2023-21285 Public exploit
In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused depu…
-
Unscored —CVE-2023-21284 Public exploit
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device featu…
-
Unscored —
In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused depu…
-
Unscored —CVE-2023-21282 Public exploit
In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This co…
-
Unscored —CVE-2023-21281 Public exploit
In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a l…
-
Unscored —
In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaus…
-
Unscored —
In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead t…