CVE-2025-46569 vulnerabilities

Vulnerabilities for packages: cosign, kots, kyverno-notation-aws, conftest, policy-controller, tfsec, spire-server, witness, trivy...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: cosign, kots, kyverno-notation-aws, conftest, policy-controller, tfsec, spire-server, witness, trivy...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: dapr-fips, conftest-fips, policy-controller, cosign-fips, witness, cosign, spire-server-fips, kyverno, trivy-fips, spire-server, trivy, kyverno-fips, dapr, conftest, kyverno-notation-aws, kyverno-notation-aws-fips, kots, tfsec, policy-controller-fips...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551: Weak Authentication

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

The JAR File Handler component in macOS is vulnerable to an issue where a malicious JAR file can bypass Gatekeeper checks. This vulnerability, characterized by CWE-354 (Improper Validation of Integrity Check Value), can potentially lead to the disclosure of confidential information . The issue ha...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148: Improper Validation of Integrity Check Value

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

PT-2025-13872

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description The issue allows a malicious JAR file to bypass Gatekeeper checks due to improper handling of executable types. Recommendatio...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia that stems from a malicious JAR file that could bypass Gatekeeper checks...

Important: Red Hat Security Advisory: Gatekeeper v3.15.4

Gatekeeper v3.15.4 Gatekeeper v3.15.4 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

Important: Red Hat Security Advisory: Gatekeeper v3.18.0

Gatekeeper v3.18.0 Gatekeeper v3.18.0 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kots, newrelic-infrastructure-agent, k3s, buildkitd, envoy-gateway, eksctl, zarf, syft, fuse-overlayfs-snapshotter, docker-cli-buildx, kargo, trivy, opa, wolfictl, helm-operator, chartmuseum, ctop, kubescape, linkerd2, cilium-cli, docker-compose, zot, osv-scanner,...

Important: Red Hat Security Advisory: Gatekeeper v3.17.2

Gatekeeper v3.17.2 Gatekeeper v3.17.2 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...