Author: Cyberthreat Blog

The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated “WRITE_SMS”...

Satellite 6.1.0 allows remote authenticated users to read administrator bookmarks.

Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash).

Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.

rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as cleartext.