CVE-2018-10994

Mô tả

Tham khảo

• signalapp/Signal-Desktop commit bfbd84f · Patch
• signalapp/Signal-Desktop release v1.10.1 · Release Notes
• twitter.com/bcrypt/status/995057030304952320 · Exploit
• twitter.com/lorenzoFB/status/995048605399633926 · Third Party Advisory
• twitter.com/ortegaalfredo/status/995940738839056384 · Exploit

Lỗ hổng khác của signal-desktop

• CVE-2023-24069THẤP 3.3Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages fro…
• CVE-2023-24068CAO 7.8Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noinde…
• CVE-2019-19954CAO 7.3Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmi…
• CVE-2019-9970TRUNG BÌNH 6.5Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerab…
• CVE-2018-14023TRUNG BÌNH 4.0Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.