EUVD-2025-23073

Malicious code in bioql PyPI...

CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43318

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root privileges may be able to access private information...

CVE-2025-43318

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root privileges may be able to access private information...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access sensitive user data...

CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43308

CVE-2025-43308 involves insufficient entitlement checks that could allow an app to access sensitive user data. Multiple connected sources confirm the issue and its remediation: the vulnerability is fixed in macOS Sonoma 14.8 and macOS Sequoia 15.7. The Apple advisories describe the root cause as ...

CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access sensitive user data...

CVE-2025-43318

CVE-2025-43318 affects macOS Tahoe 26. The issue arises from insufficient entitlement checks, allowing an app with root privileges to access private information. Apple indicates the vulnerability is addressed by additional entitlement checks and fixes are shipped in macOS Tahoe 26. Affected behav...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43311

CVE-2025-43311 affects macOS Sequoia 15.7 and macOS Sonoma 14.8, where an app may access protected user data due to insufficient entitlement controls. The issue was addressed by adding entitlement checks. Remediation: apply macOS Sonoma 14.8 or macOS Sequoia 15.7 updates (as released). The CVE en...

PT-2025-37823

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application with root privileges may be able to access private information due to missing entitlement checks. Recommendations: Update to macOS Tahoe 26...

PT-2025-37815

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.7 macOS versions prior to 14.8 macOS versions prior to 26 Description: An app may be able to access sensitive user data due to missing entitlement checks. This issue was addressed with additional entitlement checks...

PT-2025-37817

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data due to missing entitlement checks. Recommendations: Update to macO...

CVE-2025-8700 Privilege Escalation via get-task-allow entitlement in Invoice Ninja

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...