34393 matches found
PT-2025-44829
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An out-of-bounds write issue exists due to insufficient input validation. Parsing a file may lead to unexpected application termination. Recommendations...
PT-2025-51003
Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An issue existed where an application could potentially escape its sandbox restrictions. This could allow an application to gain broader access to the system than intended. Recommendations Update to mac...
PT-2025-50985
Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An injection issue existed due to inadequate validation, potentially allowing an application to access sensitive user data. Recommendations Update to macOS version 26.1...
PT-2025-44835
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.2 Description A permissions issue existed that allowed a malicious application to potentially gain root privileges. This issue was addressed through the implementation of additional restrictions. Recommendations...
PT-2025-55367
Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.1 Description An access issue exists where a malicious application may be able to access sensitive user data. This is addressed by implementing additional sandbox restrictions, which are security mechanisms tha...
PT-2025-44848
Name of the Vulnerable Software and Affected Versions visionOS versions prior to 26.1 macOS Sonoma versions prior to 14.8.2 macOS Sequoia versions prior to 15.7.2 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 Description An application may be able to escape...
Astra Linux – Vulnerability in mtr
In certain privileged contexts, mtr improperly handles the execution of a program specified by the MTRPACKET environment variable. NOTE: On macOS, mtr may often be subject to sudo rules, as a result of Homebrew not installing setuid binaries...
A New Security Layer for macOS Takes Aim at Admin Errors Before Hackers Do
A design firm is editing a new campaign video on a MacBook Pro. The creative director opens a collaboration app that quietly requests microphone and camera permissions. MacOS is supposed to flag that, but in this case, the checks are loose. The app gets access anyway. On another Mac in the same...
Russian Hackers Exploit Adaptix Pentesting Tool in Ransomware Attacks
Silent Push wars of Russian hackers exploiting Adaptix, a pentesting tool built for Windows, Linux, and macOS, in ransomware campaigns...
Google Chrome < 142.0.7444.60 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 142.0.7444.60. It is, therefore, affected by multiple vulnerabilities as referenced in the 202510stable-channel-update-for-desktop28 advisory. - Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remot...
Wireshark 4.4.x < 4.4.9 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.9 advisory. - SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service CVE-2025-9817 - Column handlin...
Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains
Threat actors tied to North Korea have been observed targeting the Web3 and blockchain sectors as part of twin campaigns tracked as GhostCall and GhostHire. According to Kaspersky, the campaigns are part of a broader operation called SnatchCrypto that has been underway since at least 2017. The...
Mozilla Firefox < 144.0.2
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 144.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-86 advisory. - Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU o...
Google Chrome < 141.0.7390.122 Vulnerability
The version of Google Chrome installed on the remote macOS host is prior to 141.0.7390.122. It is, therefore, affected by a vulnerability as referenced in the 202510stable-channel-update-for-desktop21 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2025-54658
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1 through 11.1.2 and 11.0.1 and 10.5.1 and...
CVE-2025-53950
An Exposure of Private Personal Information 'Privacy Violation' vulnerability CWE-359 in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and...
Fortinet FortiClientMac Code Injection Vulnerability
Fortinet FortiClientMAC is a U.S. fly tower Fortinet company based on macOS platform security tools. A code injection vulnerability exists in Fortinet FortiClientMac, which stems from the application's failure to properly filter special elements of constructed snippets, and can be exploited by an...
Poppler Installed (macOS)
Binary data macospopplerinstalled.nbin...
Fortinet FortiClient MacOS installer data forgery issue vulnerability
Fortinet FortiClient MacOS installer is a client installer from Fortinet. The Fortinet FortiClient MacOS installer suffers from a data forgery issue vulnerability that stems from improper cryptographic signature validation, which can be exploited by an attacker to cause elevation of privilege for...