CVE-2025-12817

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before...

PT-2024-31097 · Apple · Visionos +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 visionOS versions prior to 2.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 Description: The issue allows a malicious app to access...

PT-2024-31033 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: The issue allows an app to potentially read sensitive location information due to inadequate redaction of sensitive information. Recommendations: For iOS versions prior to...

PT-2024-31122 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...