CVE-2025-43286

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to break out of its sandbox...

CVE-2025-43286

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to break out of its sandbox...

CVE-2025-43332

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to break out of its sandbox...

CVE-2025-43204

CVE-2025-43204 targets macOS Tahoe 26, with the underlying issue described as vulnerable code being removed to fix a sandbox breakout risk. Affected product: macOS Tahoe 26. Root cause: removal of the vulnerable code (no further technical specifics provided in the documents). Impact: an app may b...

CVE-2025-43204

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...

CVE-2025-43286

The CVE-2025-43286 entry describes a permissions issue that could allow an app to break out of its sandbox on macOS. Connected sources identify the affected platforms as macOS Sonoma and macOS Sequoia, with fixes delivered in Sonoma 14.8 and Sequoia 15.7. The Apple security content lists the issu...

CVE-2025-43340

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...

PT-2025-37836

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A permissions issue was addressed with additional restrictions. An app may be able to break out of its sandbox. Recommendations: Update to macOS Tahoe 26...

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

PT-2025-37833

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A file quarantine bypass existed due to missing checks, potentially allowing an application to escape its sandbox...

Exploit for Insufficiently Protected Credentials in Linuxfoundation Containerd

It is an offensive tool for Kubernetes. The repository contains information on various methods to hack and exploit Kubernetes clusters, including articles, videos, and presentations on topics such as securing clusters by eliminating risky permissions, Kubernetes pentest methodology, and container...

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

...

Astra Linux – Vulnerability in libpod, golang-github-containers-buildah

A vulnerability was discovered in podman build and buildah. This issue occurs when using the --jobs=2 option in a container breakout scenario, and it involves a race condition during the building of a malicious Containerfile. SELinux may mitigate this issue, but even with SELinux enabled, it stil...

CVE-2025-43250

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43261

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43250

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43266

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43250

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43250

CVE-2025-43250 describes a path handling issue resolved by improved validation. Affected in Apple macOS releases: Sequoia 15.6, Sonoma 14.7.7, and Ventura 13.7.7. The issue could allow an app to break out of its sandbox, representing a local risk with no user interaction required. Mitigation is t...

CVE-2025-43275

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...