Apple多款产品 安全漏洞

Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products that stems from a logging issue that can be exploited by an attacker to cause ...

Side-Channel Inference of User Activities in AR/VR Using GPU Profiling

Over the past decade, AR/VR devices have drastically changed how we interact with the digital world. Users often share sensitive information, such as their location, browsing history, and even financial data, within third-party apps installed on these devices, assuming a secure environment...

MAL-2025-46173 Malicious code in supernova-indus-postgres-augmentedreality (npm)

The package supernova-indus-postgres-augmentedreality was found to contain malicious code...

Malicious code in augmentedreality-cz-conventional-changelog-elektra-bellatrix (npm)

The package augmentedreality-cz-conventional-changelog-elektra-bellatrix was found to contain malicious code...

MAL-2025-43537 Malicious code in augmentedreality-cz-conventional-changelog-elektra-bellatrix (npm)

The package augmentedreality-cz-conventional-changelog-elektra-bellatrix was found to contain malicious code...

Malicious code in readable-augmentedreality-transport-paleoceanography (npm)

The package readable-augmentedreality-transport-paleoceanography was found to contain malicious code...

🔍 Vulners Lookup – augmented CVE reality

Vulners Lookup – augmented CVE reality. Yesterday, VulnCheck unveiled a prototype Chrome/Chromium plugin that highlights CVE identifiers on any website and shows a popup with vulnerability details, including whether the vulnerability is in the VulnCheck KEV an extended CISA KEV. The Vulners team...

CVE-2025-41392

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute...

MAL-2025-15820 Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)

The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...

Malicious code in luminescence-rollup-augmentedreality-geoarchaeology (npm)

The package luminescence-rollup-augmentedreality-geoarchaeology was found to contain malicious code...

MAL-2025-15038 Malicious code in augmentedreality-yakutsk-biohacking-seismology (npm)

The package augmentedreality-yakutsk-biohacking-seismology was found to contain malicious code...

MAL-2025-23528 Malicious code in jabbah-futurology-sedna-augmentedreality (npm)

The package jabbah-futurology-sedna-augmentedreality was found to contain malicious code...

MAL-2025-25659 Malicious code in luminescence-rollup-augmentedreality-geoarchaeology (npm)

The package luminescence-rollup-augmentedreality-geoarchaeology was found to contain malicious code...

Malicious code in blitz-colors-abiogenesis-augmentedreality (npm)

The package blitz-colors-abiogenesis-augmentedreality was found to contain malicious code...

Malicious code in augmentedreality-yakutsk-biohacking-seismology (npm)

The package augmentedreality-yakutsk-biohacking-seismology was found to contain malicious code...

MAL-2025-38993 Malicious code in webdriver-manager-meissa-xenos-augmentedreality (npm)

The package webdriver-manager-meissa-xenos-augmentedreality was found to contain malicious code...

Malicious code in express-whitedwarf-augmentedreality-cluster (npm)

The package express-whitedwarf-augmentedreality-cluster was found to contain malicious code...

Malicious code in jabbah-futurology-sedna-augmentedreality (npm)

The package jabbah-futurology-sedna-augmentedreality was found to contain malicious code...

MAL-2025-31151 Malicious code in quasar-augmentedreality-australis-planckscale (npm)

The package quasar-augmentedreality-australis-planckscale was found to contain malicious code...

Malicious code in xerxes-augmentedreality-membrane-chalk (npm)

The package xerxes-augmentedreality-membrane-chalk was found to contain malicious code...