The vulnerability of the WebKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the WebKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to deficiencies in access control for personal information. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Managed Configuration component for macOS operating systems allows attackers to increase their privileges.

The vulnerability of the Managed Configuration component for macOS operating systems is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2025-54871

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

SUSE CVE-2025-43212

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

SUSE CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...

SUSE CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

Tenable Patch Management Client Installed (macOS)

Binary data tenablepatchmanagementclientmacosinstalled.nbin...

The vulnerability of iPadOS and macOS operating systems, related to incorrect handling of links before accessing files, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of iPadOS and macOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Find My function in macOS and iPadOS systems allows a perpetrator to disclose protected information.

The vulnerability of the Find My function in macOS and iPadOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

Anysphere Cursor Installed (macOS)

Binary data anyspherecursormacosinstalled.nbin...

The vulnerability of the CFNetwork component allows attackers to escalate their privileges on operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS.

The vulnerability of the CFNetwork component in operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2025-54871

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

CVE-2025-54871 Electron Capture is Vulnerable to TCC Bypass via Misconfigured Node Fuses (macOS)

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

CVE-2025-54871

CVE-2025-54871 affects Electron Capture (elecap) on macOS. Versions 2.19.1 and earlier expose a TCC bypass: enabling the ELECTRON_RUN_AS_NODE environment variable allows arbitrary Node.js code to run via the -e flag inside the main Electron context, inheriting existing TCC entitlements (e.g., acc...

CVE-2025-54871 Electron Capture is Vulnerable to TCC Bypass via Misconfigured Node Fuses (macOS)

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

CVE-2025-54871 Electron Capture is Vulnerable to TCC Bypass via Misconfigured Node Fuses (macOS)

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

PT-2025-31890 · Unknown · Electroncapture

Name of the Vulnerable Software and Affected Versions: Electron Capture versions 2.19.1 and below Description: Electron Capture facilitates video playback for screen-sharing and capture. The elecap app on macOS allows local unprivileged users to bypass macOS TCC Transparency, Consent, and Control...

Google Chrome < 139.0.7258.66 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 139.0.7258.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 202508stable-channel-update-for-desktop advisory. - Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remot...

The vulnerability of the CFNetwork framework in iPadOS and macOS systems, which allows a hacker to trigger a service failure.

The vulnerability of the CFNetwork framework in iPadOS and macOS relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Electron Capture 安全漏洞

Electron Capture is a window capture software by Steve Seguin Personal Developer. A security vulnerability exists in Electron Capture 2.19.1 and earlier versions, which stems from a vulnerability that allows bypassing macOS TCC privacy protections and could lead to arbitrary Node.js code executio...