PT-2025-50997

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to obtain elevated privileges, specifically root access. The issue was resolved through enhanced security checks. Recommendations Update to version 26.1 or later...

curl: Buffer Overflow in WebSocket Handshake (lib/ws.c:1287)

Summary: Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy in the handshake process. The vulnerability is located at lib/ws.c:1287 where strcpykeyval, randstr is called without proper bounds checking, despite having a bounds check earlier in the code. AI...

CVE-2025-53950

An Exposure of Private Personal Information 'Privacy Violation' vulnerability CWE-359 in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and...

EUVD-2025-34694

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.7.7, macOS Sonoma 14.7.7, macOS Sequoia 15.6. An app may be able to access sensitive user data...

APSB25-95 : Security update available for Adobe Creative Cloud Desktop

Adobe has released an update for the Creative Cloud Desktop for macOS. This update includes a fix for an important vulnerability that could lead to arbitrary file system write in the context of the current user...

PT-2025-41479

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26 Description A logic issue existed due to insufficient validation, allowing an application to bypass Gatekeeper checks. Recommendations Update to macOS Tahoe 26 or later...

EUVD-2023-46450

Malicious code in bioql PyPI...

EUVD-2025-25771

Malicious code in bioql PyPI...

EUVD-2025-31740

Malicious code in bioql PyPI...

EUVD-2025-29322

Malicious code in bioql PyPI...

EUVD-2025-29280

Malicious code in bioql PyPI...

EUVD-2025-26254

Malicious code in bioql PyPI...

EUVD-2025-29275

Malicious code in bioql PyPI...

PT-2025-39998

Name of the Vulnerable Software and Affected Versions Acronis True Image macOS versions prior to build 42389 Acronis True Image for SanDisk macOS versions prior to build 42198 Acronis True Image for Western Digital macOS versions prior to build 42197 Description An insecure XPC service...

CVE-2025-43400

CVE-2025-43400 is an out-of-bounds write vulnerability in FontParser that Apple fixed across multiple platforms. According to the provided documents, the issue could be triggered by processing a maliciously crafted font and may lead to unexpected app termination or memory corruption. Affected pro...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc. in the U.S. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. apple visionOS is an operating system for AR glasses. A security vulnerability exists in multiple Apple products that...

CVE-2025-34192 Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 macOS/Linux client deployments are built against OpenSSL 1.0.2h-fips released May 2016, which has been end-of-life since 2019 and is no longer supported by the OpenSSL...

Ashlar-Vellum Cobalt Out-of-Bounds Write Vulnerability

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds write...

Ashlar-Vellum Cobalt Type Obfuscation Vulnerability (CNVD-2025-23022)

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. A type confusion vulnerability exists in Ashlar-Vellum Cobalt,...

CVE-2025-43354

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...