← Back
CWE-1264

3 CVEs • Abstraction: Base

Hardware Logic with Insecure De-Synchronization between Control and Data Channels

The hardware logic for error handling and security checks can incorrectly forward data before the security check is complete.

JSON object

Loading...

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 30, 2026
Jun 29, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Visiting a website may leak sensitive data.
-
-
Jun 17, 2026
May 16, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local...Show more
Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of privilege local accessShow less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Oct 14, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity.