Lucene search
+L

34380 matches found

OSV
OSV
added 2025/12/19 7:16 a.m.11 views

CVE-2025-66495

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS6.1AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/19 7:16 a.m.10 views

CVE-2025-66495

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/19 7:09 a.m.4 views

CVE-2025-66495 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS7.2AI score0.00298EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/19 7:09 a.m.8 views

EUVD-2025-204465

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS7.1AI score0.00298EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/19 7:09 a.m.39 views

CVE-2025-66495 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS0.00298EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.5 views

Apple macOS Tahoe Memory Mishandling Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a memory mishandling vulnerability that stems from a flaw in the system's memory handling...

7.8CVSS6AI score0.00212EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.14 views

Apple macOS Tahoe Underchecked Vulnerability (CNVD-2025-3114612)

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an undercheck vulnerability that can be exploited by an attacker to cause an application t...

7.8CVSS6.4AI score0.00183EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.7 views

Apple macOS Tahoe Permission Issues Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a privilege issue vulnerability that stems from the system having insufficient security...

5.5CVSS5.9AI score0.00161EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.20 views

Apple macOS Tahoe Symbolic Link Mishandling Vulnerability (CNVD-2025-3115302)

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a symbolic link mishandling vulnerability that stems from insufficient security restrictio...

5.5CVSS6.1AI score0.00192EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.23 views

Apple macOS Tahoe Injection Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an injection vulnerability that stems from a lack of adequate validation and cleanup of th...

5.5CVSS6.4AI score0.00211EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.9 views

Apple macOS Tahoe Logic Insufficient Limits Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a Logical Restriction Insufficiency vulnerability that can be exploited by an attacker to...

5.5CVSS6AI score0.00197EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.15 views

Apple macOS Tahoe Sandboxing Insufficient Restrictions Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an Insufficient Sandbox Restrictions vulnerability, which stems from an insufficient...

3.3CVSS6.2AI score0.00154EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/19 12:00 a.m.10 views

Foxit PDF Reader for Mac < 2025.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2025.3. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the...

7.8CVSS6.8AI score0.00298EPSS
SaveExploits0References6
CNVD
CNVD
added 2025/12/19 12:00 a.m.13 views

Apple macOS Tahoe Insufficient Authentication Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an insufficient authentication vulnerability that can be exploited by an attacker to cause...

5.5CVSS6.3AI score0.00217EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/19 12:00 a.m.8 views

Apple macOS Tahoe Insufficient Privilege Restriction Vulnerability

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a permission restriction insufficiency vulnerability that stems from a flaw in the system'...

5.5CVSS6.5AI score0.0013EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.18 views

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

9.8CVSS5.8AI score0.00521EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.18 views

CVE-2025-43514

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data...

5.5CVSS6AI score0.00176EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.18 views

CVE-2025-46278

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data...

5.5CVSS6AI score0.00159EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.15 views

CVE-2025-46288

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive payment tokens...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.10 views

CVE-2025-46283

A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data...

5.5CVSS5.8AI score0.00183EPSS
SaveExploits0References1
Rows per page
Query Builder