<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: intuit</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-14833: Intuit Lacerte 2017 has Incorrect Access Control.</title><link>https://patchthecve.com/cve/CVE-2018-14833.html</link><guid>https://patchthecve.com/cve/CVE-2018-14833.html</guid><pubDate>Wed, 17 Jun 2026 01:41:43 +0000</pubDate><description>MEDIUM 5.9: Intuit Lacerte 2017 has Incorrect Access Control.</description></item><item><title>CVE-2018-3854: An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken</title><link>https://patchthecve.com/cve/CVE-2018-3854.html</link><guid>https://patchthecve.com/cve/CVE-2018-3854.html</guid><pubDate>Wed, 17 Jun 2026 01:57:54 +0000</pubDate><description>HIGH 7.1: An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowing t</description></item><item><title>CVE-2018-11338: Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext</title><link>https://patchthecve.com/cve/CVE-2018-11338.html</link><guid>https://patchthecve.com/cve/CVE-2018-11338.html</guid><pubDate>Wed, 17 Jun 2026 01:35:44 +0000</pubDate><description>HIGH 7.5: Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer list conta</description></item></channel></rss>