Apple macOS Sequoia code execution vulnerability (CNVD-2025-19510)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an issue in the CoreMedia component when opening specially crafted files. An attacker can exploit the vulnerability to execute...

Apple TV < 18.6 Multiple Vulnerabilities (124153)

According to its banner, the version of Apple TV on the remote device is prior to 18.6. It is therefore affected by multiple vulnerabilities as described in the 124153 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid249207; scriptversion"1.3";...

The vulnerability of the Power Management function in macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the power management function in macOS operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the AppleMobileFileIntegrity (AMFI) extension in macOS operating systems allows attackers to increase their privileges.

The vulnerability of the AppleMobileFileIntegrity AMFI extension in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Metal interface in operating systems such as macOS, watchOS, iOS, iPadOS, tvOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Metal interface in operating systems such as macOS, watchOS, iOS, iPadOS, tvOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protect...

Apple macOS Sequoia code execution vulnerability (CNVD-2025-19511)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an error in the model I/O component when opening a specially crafted file. An attacker can exploit the vulnerability to execute...

The vulnerability of the web page rendering module in Safari browsers of the WebKit framework in operating systems such as watchOS, visionOS, iOS, iPadOS, macOS, and tvOS allows attackers to trigger a service failure.

The vulnerability of the Web page rendering module in WebKit of Safari browsers for operating systems such as watchOS, visionOS, iOS, iPadOS, macOS, and tvOS arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause servi...

Adobe Animate 23.x < 23.0.13 / 24.x < 24.0.10 Multiple Vulnerabilities (APSB25-73)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.13 or 24.0.10. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-73 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-49561 - Use...

Linux Distros Unpatched Vulnerability : CVE-2025-38216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816...

BIT-LIBPYTHON-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

Apple macOS AudioToolboxCore Audio Conversion Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists...

CVE-2025-8393 Dreame Technology iOS and Android Mobile Applications Improper Certificate Validation

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...

The vulnerability in the WasmToJSException script of the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code and trigger a service failure.

The vulnerability of the WasmToJSException script in Safari browsers on macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures within the browser context...

The vulnerability of the CoreServices component in macOS operating systems, which allows attackers to escalate their privileges.

The vulnerability of the CoreServices component in macOS operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of iOS, iPadOS, and macOS operating systems lies in their lack of access control mechanisms, which allow attackers to escalate their privileges.

The vulnerabilities of iOS, iPadOS, and macOS operating systems are related to lack of access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of iOS and iPadOS operating systems, related to bypassing authentication through spoofing, allows attackers to trigger a service failure.

The vulnerability of iOS and iPadOS operating systems relates to bypassing authentication through spoofing. Exploiting this vulnerability can allow attackers to trigger a service failure...

The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system allows a violator to execute arbitrary code within the context of the root user.

The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...

Linux Distros Unpatched Vulnerability : CVE-2022-49717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix refcount leak in buildfiqaffinity offindnodebyphandle returns a node...

Chinese Groups Stole 115 Million US Cards in 16-Month Smishing Campaign

A SecAlliance report reveals Chinese smishing syndicates compromised 115M US payment cards by bypassing MFA to exploit Apple Pay and Google Wallet...

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

The malicious ad tech purveyor known as VexTrio Viper has been observed developing several malicious apps that have been published on Apple and Google's official app storefronts under the guise of seemingly useful applications. These apps masquerade as VPNs, device "monitoring" apps, RAM cleaners...