CVE-2025-0140 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on...

CVE-2025-0140

CVE-2025-0140 describes an incorrect privilege assignment in the Palo Alto Networks GlobalProtect App (macOS) that can allow a locally authenticated non-administrative user to disable the app. The primary description states Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP are not aff...

CVE-2025-0139 Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability

An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints to escalate their privileges to root...

CVE-2025-0139 Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability

An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints to escalate their privileges to root...

CVE-2025-0139

CVE-2025-0139 describes an incorrect privilege assignment in Palo Alto Networks Autonomous Digital Experience Manager that allows a locally authenticated low-privileged user on macOS endpoints to escalate to root. The vulnerability arises from improper privilege handling within the product, enabl...

PT-2025-28968 · Palo Alto Networks · Palo Alto Networks Autonomous Digital Experience Manager

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Autonomous Digital Experience Manager affected versions not specified Description: An incorrect privilege assignment exists in Palo Alto Networks Autonomous Digital Experience Manager. A locally authenticated low-privileged...

PT-2025-28945 · Palo Alto Networks · Globalprotect App +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App versions prior to 6.2.8-c243 Description: An incorrect privilege assignment allows a locally authenticated, non-administrative user to escalate privileges to root on macOS and Linux, or NTAUTHORITY SYSTEM ...

PT-2025-28969 · Palo Alto Networks · Globalprotect App

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App versions affected versions not specified Description: An incorrect privilege assignment allows a locally authenticated, non-administrative user to disable the GlobalProtect App, even when the configuration...

APSB25-56 : Security update available for Adobe Audition

Adobe has released an update for Adobe Audition for Windows and macOS. This update resolves an important vulnerability that could lead to application denial-of-service...

Adobe After Effects < 24.6.7 / 25.0 < 25.3 Multiple Vulnerabilities (APSB25-49) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 24.6.7, 25.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-49 advisory. - After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability tha...

Adobe InDesign < 19.5.4 / 20.0 < 20.4.0 Multiple Arbitrary code execution (APSB25-60) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-60 advisory. - InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe Audition < 24.6.7 / 25.0 < 25.3 Application denial-of-service (APSB25-56) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 24.6.7, 25.3. It is, therefore, affected by a vulnerability as referenced in the APSB25-56 advisory. - Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer...

webkitgtk: Memory corruption leading to arbitrary code execution

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

webkitgtk: Insufficient checks leading to arbitrary code execution

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution...

webkitgtk: processing web content may lead to arbitrary code execution

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

webkitgtk: Memory initialization issue possibly leading to memory disclosure

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...

CVE-2025-34089

An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility developed by Aexol Studio, in versions up to and including 2025.7. When the application is configured with authentication disabled i.e., the "Allow unknown devices" option is enabled, t...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

Yes, CVE‑2025‑32463 is a critical local privilege escalati...

SUSE CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...