CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24207

CVE-2025-24207 is a permissions issue in macOS where an app could enable iCloud storage features without user consent. The issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and ...

PT-2025-13896 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A permissions issue was addressed with additional restrictions. An app may be able to enable iCloud storage feature...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from a permissions issue that could result in enabling iCloud storage without user consent...

Malicious code in icloud-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2010e55e06ea51e1cc28832f3dcaefbe120055aad38b827efac23cc2a2281f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2764 Malicious code in icloud-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2010e55e06ea51e1cc28832f3dcaefbe120055aad38b827efac23cc2a2281f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icloud-xod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cd66ab9cb1375f4aec21ca16727392430962995f1140f32f6af4a21d3978ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2316 Malicious code in icloud-xod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cd66ab9cb1375f4aec21ca16727392430962995f1140f32f6af4a21d3978ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2016-4610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before...

UK Demanded Apple Add a Backdoor to iCloud

Last month, the UK government demanded that Apple weaken the security of iCloud for users worldwide. On Friday, Apple took steps to comply for users in the United Kingdom. But the British law is written in a way that requires Apple to give its government access to anyone, anywhere in the world. I...

$1.4 Billion Stolen From ByBit in Biggest Crypto Theft Ever

Plus: Apple turns off end-to-end encrypted iCloud backups in the UK after pressure to install a backdoor, and two spyware apps expose victim data—and the identities of people who installed the apps...

Apple Drops iCloud's Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands

Apple is removing its Advanced Data Protection ADP feature for iCloud from the United Kingdom with immediate effect following government demands for backdoor access to encrypted user data. The development was first reported by Bloomberg. ADP for iCloud is an optional setting that ensures that...

PT-2025-25364

Name of the Vulnerable Software and Affected Versions Apple watchOS versions 11.3.1 and later Apple macOS Ventura versions 13.7.4 and later Apple iOS versions 15.8.4 and later Apple iPadOS versions 15.8.4 and later Apple iOS versions 16.7.11 and later Apple iPadOS versions 16.7.11 and later Apple...

About the security content of macOS Sonoma 14.7.4

About the security content of macOS Sonoma 14.7.4 This document describes the security content of macOS Sonoma 14.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of macOS Ventura 13.7.4

About the security content of macOS Ventura 13.7.4 This document describes the security content of macOS Ventura 13.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

The vulnerability of iCloud’s service for macOS operating systems, related to errors in the use of standard permissions, allows a perpetrator to execute arbitrary code.

The vulnerability of the iCloud service for macOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of iCloud Photo Library on macOS operating systems allows a hacker to bypass security restrictions.

The vulnerability of iCloud Photo Library on macOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a remote attacker to bypass security restrictions...

Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass Vulnerabilities

A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality, granting one access to modify the restrictions. It allows a local attacker to acquire the Screen Time Passcode by bypassing the anti-bruteforce protections on the four-digit Passcode, and...