Lucene search
+L

Apple MacOSX Security Update (HT122717)

🗓️ 13 May 2025 00:00:00Reported by Copyright (C) 2025 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 29 Views

Apple Mac OS X has multiple vulnerabilities allowing remote code execution by attackers.

Related
Refs
Code
ReporterTitlePublishedViews
Family
zdt
zdt
OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle Vulnerability
18 Feb 202500:00
zdt
ibm
IBM Security Bulletins
Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed
3 Dec 202506:06
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in openssh (CVE-2025-26465) affects Power HMC.
3 Feb 202606:02
ibm
ibm
IBM Security Bulletins
Security Bulletin:Vulnerability in OpenSSH affects IBM Netezza Appliance
17 Dec 202513:28
ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a stack overflow vulnerability in libexpat library [CVE-2024-8176]
13 Jun 202516:26
ibm
ibm
IBM Security Bulletins
Security Bulletin: Oracle Outside In Technology (OIT) v8.5.7 BP7 vulnerabilities CVE-2025-29482 (vulnerable), CVE-2024-8176 (not vulnerable) in FileNet Content Manager (FNCM) Content Based Retrieval (CBR) content indexing
30 Mar 202609:37
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in expat library (CVE-2024-8176) affects Power HMC.
7 Jul 202505:41
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities found in IBM TXSeries for Multiplatforms.
7 Jul 202514:23
ibm
ibm
IBM Security Bulletins
Security Bulletin: AIX/VIOS is vulnerable to denial of service and possible code execution due to Perl (WS-2025-0004)
5 Feb 202622:03
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
30 Sep 202508:36
ibm
Rows per page
# SPDX-FileCopyrightText: 2025 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.836301");
  script_version("2025-05-14T05:40:11+0000");
  script_cve_id("CVE-2025-31246", "CVE-2025-31240", "CVE-2025-31237", "CVE-2025-31251",
                "CVE-2025-31235", "CVE-2025-31208", "CVE-2025-31196", "CVE-2025-31209",
                "CVE-2025-31239", "CVE-2025-31233", "CVE-2025-30453", "CVE-2025-24258",
                "CVE-2025-30448", "CVE-2025-31232", "CVE-2025-24144", "CVE-2025-31219",
                "CVE-2025-31241", "CVE-2024-8176", "CVE-2025-30440", "CVE-2025-31222",
                "CVE-2025-24274", "CVE-2025-24142", "CVE-2025-26465", "CVE-2025-26466",
                "CVE-2025-31245", "CVE-2025-31224", "CVE-2025-31221", "CVE-2025-31213",
                "CVE-2025-31247", "CVE-2025-30442", "CVE-2025-31242", "CVE-2025-31220",
                "CVE-2025-24155");
  script_tag(name:"cvss_base", value:"7.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_tag(name:"last_modification", value:"2025-05-14 05:40:11 +0000 (Wed, 14 May 2025)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2025-03-14 09:15:14 +0000 (Fri, 14 Mar 2025)");
  script_tag(name:"creation_date", value:"2025-05-13 22:03:43 +0530 (Tue, 13 May 2025)");
  script_name("Apple MacOSX Security Update (HT122717)");

  script_tag(name:"summary", value:"Apple Mac OS X is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"impact", value:"Successful exploitation allows an attacker
  to run arbitrary code, disclose information, elevate privileges, bypass
  security restrictions and cause denial of service.");

  script_tag(name:"affected", value:"Apple macOS Sonoma prior to version
  14.7.6");

  script_tag(name:"solution", value:"Update macOS Sonoma to version 14.7.6 or
  later.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");
  script_xref(name:"URL", value:"https://support.apple.com/en-us/122717");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2025 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/osx_name", "ssh/login/osx_version");
  exit(0);
}

include("version_func.inc");

osName = get_kb_item("ssh/login/osx_name");
if(!osName)
  exit(0);

osVer = get_kb_item("ssh/login/osx_version");
if(!osVer || osVer !~ "^14\." || "Mac OS X" >!< osName) {
  exit(0);
}

if(version_is_less(version:osVer, test_version:"14.7.6")) {
  report = report_fixed_ver(installed_version:osVer, fixed_version:"14.7.6");
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 May 2025 00:00Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.16.8 - 9.1
EPSS0.39845
SSVC
29