CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-48500

CVE-2025-48500 affects the macOS BIG-IP APM VPN browser client installer. A missing file integrity check may allow a local, authenticated attacker with local access to replace the installer with a malicious package, potentially leading to local privilege escalation. Affected versions include BIG-...

CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-8672

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...

PT-2025-33001 · F5 · F5 Vpn

Name of the Vulnerable Software and Affected Versions: MacOS F5 VPN browser client installer affected versions not specified Description: A missing file integrity check exists in the MacOS F5 VPN browser client installer, potentially allowing a local, authenticated attacker with access to the loc...

The vulnerability of the HTTPS protocol implementation in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the HTTPS protocol’s implementation in macOS systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Apple macOS Sequoia code execution vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. A code execution vulnerability exists in Apple macOS Sequoia, which is caused due to an error in the model I/O component when opening a specially crafted file, and can be exploited by an attacker to execute arbitrar...

Apple macOS Sequoia code execution vulnerability (CNVD-2025-19510)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an issue in the CoreMedia component when opening specially crafted files. An attacker can exploit the vulnerability to execute...

Security Updates for Microsoft Office Products (August 2025) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-12-2025 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2025-53738, CVE-2025-53784 - Use after...

Adobe Dimension < 4.1.4 Memory leak (APSB25-84) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 4.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-84 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2025-54238 Note that Nessus has not tested for this issue...

Adobe InDesign < 19.5.5 / 20.0 < 20.5.0 Multiple Vulnerabilities (APSB25-79) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.5, 20.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-79 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-54224, CVE-2025-54225,...

BIT-LIBPYTHON-2024-12254 Unbounded memory buffering in SelectorSocketTransport.writelines()

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

CVE-2025-8672

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...

CVE-2025-8672 TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...

PT-2025-32540 · Gimp · Gimp

Name of the Vulnerable Software and Affected Versions: GIMP versions prior to 3.1.4.2 Description: The MacOS version of GIMP includes a Python interpreter that inherits Transparency, Consent, and Control TCC permissions granted to the main application. An attacker with local access can use this...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947 Spring Cloud Gateway Vulnerability Demonstratio...

The vulnerability of the Single Sign-On component in macOS operating systems allows a perpetrator to gain unauthorized access to confidential data.

The vulnerability of the Single Sign-On component in macOS operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential data...

The vulnerability of the WebKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the WebKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to deficiencies in access control for personal information. Exploiting this vulnerability can allow attackers to disclose protected information...

Linux Distros Unpatched Vulnerability : CVE-2019-9804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of...