🗓️ OPPA: Ohio could become the third US state to enact a new consumer privacy law in 2021 🗓️
📖 Read
via "The Daily Swig".
Ohio Personal Privacy Act will grant Ohioans an expansive set of new rights, writes US attorney David Oberly📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
OPPA: Ohio could become the third US state to enact a new consumer privacy law in 2021
Ohio Personal Privacy Act will grant Ohioans an expansive set of new rights, writes US attorney David Oberly
‼ CVE-2021-0635 ‼
📖 Read
via "National Vulnerability Database".
When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:Android-10Android ID: A-189402477📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0693 ‼
📖 Read
via "National Vulnerability Database".
In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due to an unprotected provider. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-184046948📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28702 ‼
📖 Read
via "National Vulnerability Database".
PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR"). These are typically used for platform tasks such as legacy USB emulation. If such a device is passed through to a guest, then on guest shutdown the device is not properly deassigned. The IOMMU configuration for these devices which are not properly deassigned ends up pointing to a freed data structure, including the IO Pagetables. Subsequent DMA or interrupts from the device will have unpredictable behaviour, ranging from IOMMU faults to memory corruption.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0682 ‼
📖 Read
via "National Vulnerability Database".
In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-159624555📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0695 ‼
📖 Read
via "National Vulnerability Database".
In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-184018316References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0644 ‼
📖 Read
via "National Vulnerability Database".
In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-181053462📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0598 ‼
📖 Read
via "National Vulnerability Database".
In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180422108📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0683 ‼
📖 Read
via "National Vulnerability Database".
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-185398942📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0636 ‼
📖 Read
via "National Vulnerability Database".
When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion: Android-10Android ID: A-189392423📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0681 ‼
📖 Read
via "National Vulnerability Database".
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-192535337📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0684 ‼
📖 Read
via "National Vulnerability Database".
In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179839665📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0688 ‼
📖 Read
via "National Vulnerability Database".
In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-161149543📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0691 ‼
📖 Read
via "National Vulnerability Database".
In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-188554048📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0692 ‼
📖 Read
via "National Vulnerability Database".
In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-179289753📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0687 ‼
📖 Read
via "National Vulnerability Database".
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-188913943📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0686 ‼
📖 Read
via "National Vulnerability Database".
In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-177927831📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0690 ‼
📖 Read
via "National Vulnerability Database".
In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0595 ‼
📖 Read
via "National Vulnerability Database".
In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-177457096📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0689 ‼
📖 Read
via "National Vulnerability Database".
In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-190188264📖 Read
via "National Vulnerability Database".
🦿 How to encrypt specific sections of Google Docs with the DocSecrets add-on 🦿
📖 Read
via "Tech Republic".
Anyone who needs to hide away sections of text in Google Documents should give this handy add-on a try.📖 Read
via "Tech Republic".
TechRepublic
How to encrypt specific sections of Google Docs with the DocSecrets add-on
Anyone who needs to hide away sections of text in Google Documents should give this handy add-on a try.