CVE-2025-43253

This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to launch arbitrary binaries on a trusted device...

CVE-2025-43252

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive user data when resolving symlinks...

CVE-2025-43259

CVE-2025-43259 is a macOS vulnerability where an attacker with physical access to a locked device may view sensitive user information. The issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The vulnerability affects the confidentiality of data on affected systems...

CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...

CVE-2025-43214

CVE-2025-43214 affects WebKit/GPU-based web content handling used by Safari/WebKitGTK; the issue is a memory handling/processing weakness that may cause an unexpected crash when processing malicious web content. The CVE is listed with CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no...

CVE-2025-31278

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-43213

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43243

CVE-2025-43243 is a macOS vulnerability describing a permissions issue that could allow an app to modify protected parts of the file system. The issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. According to the CVE entry, the CVSS v3.1 base score is 9.8 (CRITIC...

CVE-2025-7848 Missing input check in lvpict.cpp used in NI LabVIEW

A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior...

CVE-2025-36010

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-5922

TSplus Remote Access Admin Tool stores the PIN hash in the system registry for versions below 18.40.6.17, and the hash is not salted, enabling potential brute-force attacks using rainbow tables. Patches are provided in v18.40.6.17 and in LTS lines: v17.2025.6.27 and v16.2025.6.27. Affected compon...

CVE-2025-7656 affecting package nodejs18 for versions less than 18.20.3-8

CVE-2025-7656 affecting package nodejs18 for versions less than 18.20.3-8. A patched version of the package is available...

CVE-2025-5587

creationtimestamp| type| source ---|---|--- 2025-07-29 13:29:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv47nl3blu2w...

CVE-2025-7458 SQLite integer overflow in key info allocation may lead to information disclosure.

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...

CVE-2025-40682

creationtimestamp| type| source ---|---|--- 2025-07-29 12:41:18+00:00| seen| https://bsky.app/profile/potato.software/post/3lv44wrajiz2c...

CVE-2025-53080

creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

CVE-2025-53081

creationtimestamp| type| source ---|---|--- 2025-07-29 09:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3srwdb2n2h 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

BELL-CVE-2025-38476

Bulletin has no description...

CVE-2025-4566

CVE-2025-4566 : Elementor Website Builder for WordPress is vulnerable to Stored XSS via the data-text attribute in the Text Path widget (Text Path). Affected: all versions up to 3.30.2. Exploitation requires authenticated access at Contributor level or higher; impact is script execution when a us...