CVE-2025-6183

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...

VulnCheck KEV: CVE-2025-55177

Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We...

CVE-2025-55033 Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...

CVE-2025-55032 Focus incorrectly ignores Content-Disposition headers for some MIME types

Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142...

Amazon Linux 2 : webkitgtk4 (ALAS-2025-2970)

The version of webkitgtk4 installed on the remote host is prior to 2.48.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2970 advisory. A cookie management issue was addressed with improved state management. This issue is fixed in watchOS 11, macOS Sequo...

Linux Distros Unpatched Vulnerability : CVE-2023-36671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the operating system such that all IP traffi...

Linux Distros Unpatched Vulnerability : CVE-2024-27830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS...

CVE-2025-7961

CVE-2025-7961 affects Wulkano KAP for MacOS (version 3.6.0). The root cause is Improper Generation of Code (Code Injection), enabling a TCC bypass. The CVSS-like data indicates Local attack, Low privileges, No user interaction, with Confidentiality impact High and other impacts limited (Integrity...

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support Eo...

Apple macOS Sequoia code execution vulnerability (CNVD-2025-19511)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an error in the model I/O component when opening a specially crafted file. An attacker can exploit the vulnerability to execute...

Apple macOS AudioToolboxCore Audio Conversion Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists...

The vulnerability of iOS and iPadOS operating systems, related to bypassing authentication through spoofing, allows attackers to trigger a service failure.

The vulnerability of iOS and iPadOS operating systems relates to bypassing authentication through spoofing. Exploiting this vulnerability can allow attackers to trigger a service failure...

The vulnerability of iOS, iPadOS, and macOS operating systems lies in their lack of access control mechanisms, which allow attackers to escalate their privileges.

The vulnerabilities of iOS, iPadOS, and macOS operating systems are related to lack of access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the CoreServices component in macOS operating systems, which allows attackers to escalate their privileges.

The vulnerability of the CoreServices component in macOS operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

SUSE CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

Apple macOS path traversal vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from a path traversal vulnerability that stems from improper handling of directory paths, which can be exploited by an attacker to gain access to protected user data...

Apple macOS Access Control Error Vulnerability (CNVD-2025-18452)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An access control error vulnerability exists in Apple macOS, which can be exploited by an attacker to read files outside of the sandbox...

Unspecified vulnerability in Apple macOS Sequoia and Apple macOS Sonoma (CNVD-2025-18415)

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. Apple macOS Sequoia and Apple macOS Sonoma contain a security vulnerability that originates from memory mishandling, which can be exploited by an attacker to cause a malicious application to rea...

Apple macOS Sequoia has an unspecified vulnerability (CNVD-2025-18403)

Apple macOS Sequoia is an operating system from the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.6 that stems from insufficient authentication and can be exploited by an attacker to cause access to sensitive user data...

Unspecified Vulnerability in Apple macOS (CNVD-2025-17892)

Apple macOS Sequoia is an operating system from the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.6, which can be exploited by a local attacker to potentially access the Keychain project...