CVE-2025-31225

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...

CVE-2025-31227

A logic issue in iOS and iPadOS (versions prior to 18.5 ) allows an attacker with physical access to a device to potentially access a deleted call recording . This vulnerability was addressed by Apple through improved checks in iOS 18.5 and iPadOS 18.5 . Exploitation details for this specific vul...

CVE-2025-31227

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...

CVE-2025-31227

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...

CVE-2025-31253

A vulnerability in the FaceTime video telephony technology on iOS and iPadOS operating systems allows an attacker to cause a service failure . The root cause is related to the incorrect duration of a call session . This issue was addressed through improved state management , and the fix is availa...

CVE-2025-31225

A privacy issue in the Call History module of iOS and iPadOS operating systems allows for the exposure of sensitive data. Due to insufficient protection, call history from deleted apps may still appear in Spotlight search results . This vulnerability could potentially allow a remote attacker to g...

CVE-2025-31225

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...

CVE-2025-31225

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...

CVE-2025-31227: Incorrect Authorization

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...

About the security content of iOS 18.5 and iPadOS 18.5

About the security content of iOS 18.5 and iPadOS 18.5 This document describes the security content of iOS 18.5 and iPadOS 18.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which arises from the possibility that call logs may still...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which arises from the possibility that a physically...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from an insufficient restriction of options on...

Dígitro NGC Explorer code-related vulnerabilities

Dígitro NGC Explorer is a Dígitro intelligent analytics platform for emergency call systems NGC for public safety communications data processing. A code issue vulnerability exists in Dígitro NGC Explorer version 3.44.15 and earlier, which stems from a session expiration issue...

Dígitro NGC Explorer security vulnerabilities

Dígitro NGC Explorer is a Dígitro intelligent analytics platform for emergency call systems NGC for public safety communications data processing. A security vulnerability exists in Dígitro NGC Explorer version 3.44.15 that stems from a password field that is not properly masked...

DEBIAN-CVE-2025-37880

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

DEBIAN-CVE-2025-37844

In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifsserverdbg implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2025-37844

In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifsserverdbg implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2025-37844: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifsserverdbg implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

DEBIAN-CVE-2025-43926

An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetching user data via GetUserData, these keys and values are retrieved and given as a whole to other...