9437 matches found
CVE-2025-24161
The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app termination...
CVE-2025-24117
CVE-2025-24117 affects Apple platforms via LaunchServices, enabling an app to fingerprint the user. The issue is tied to improved redaction of sensitive information and is fixed in Apple updates: iPadOS 17.7.4, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, and watchOS 11.3. The publ...
CVE-2025-24117
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iPadOS 17.7.4, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3. An app may be able to fingerprint the user...
CVE-2025-24140
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. Files downloaded from the internet may not have the quarantine flag applied...
CVE-2025-24101
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data...
CVE-2025-24135
This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges...
CVE-2025-24154
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, visionOS 2.3. An attacker may be able to cause unexpected system termination or corrupt kernel memory...
CVE-2024-54468
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox...
CVE-2025-24112
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination...
CVE-2025-24112
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination...
CVE-2024-54541
The CVE-2024-54541 entry affects Apple platforms and is addressed by patches in multiple OS updates. Affected products include macOS Ventura 13.7.2; macOS Sonoma 14.7.2; macOS Sequoia 15.2; visionOS 2.2; tvOS 18.2; watchOS 11.2; iOS 18.2; and iPadOS 18.2. Description indicates an app may access u...
CVE-2024-56964
An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56948
creationtimestamp| type| source ---|---|--- 2025-01-27 18:49:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113901814745144782 2025-01-27 19:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnjwp562f 2025-01-27 22:25:00+00:00| seen|...
CVE-2025-24367
Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...
CVE-2025-24356
fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...
CVE-2025-24356 UDP traffic amplification via fastd's fast reconnect feature
fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...
CVE-2024-27256
creationtimestamp| type| source ---|---|--- 2025-01-27 16:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292405068539 2025-01-27 17:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgwy6dtz2r...
CVE-2023-52292
creationtimestamp| type| source ---|---|--- 2025-01-27 16:14:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113901204902829019 2025-01-27 16:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmftjcx2r 2025-01-27 17:40:27+00:00| seen|...
CVE-2024-45598
creationtimestamp| type| source ---|---|--- 2025-01-27 15:51:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113901113279203094 2025-01-27 16:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdms73z22e 2025-01-27 17:40:18+00:00| seen|...