35104 matches found
Adobe Reader < 20.005.30774 / 25.001.20529 Multiple Vulnerabilities (APSB25-57) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30774 or 25.001.20529. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability...
Mozilla Thunderbird < 128.11.1
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.11.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-49 advisory. - A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the...
Google Chrome < 137.0.7151.103 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 137.0.7151.103. It is, therefore, affected by multiple vulnerabilities as referenced in the 202506stable-channel-update-for-desktop10 advisory. - Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a...
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
Cybersecurity researchers are alerting to a new malware campaign that employs the ClickFix social engineering tactic to trick users into downloading an information stealer malware known as Atomic macOS Stealer AMOS on Apple macOS systems. The campaign, according to CloudSEK, has been found to...
CVE-2025-30415
Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40077, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...
macOS LaunchDaemon iOS 17.2 - Privilege Escalation
!/usr/bin/env python3 Exploit Title: macOS LaunchDaemon iOS 17.2 - Privilege Escalation Author: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-05-31 Tested on: macOS Sonoma 14.x ARM64 / x8664 CVE: CVE-2025-24085 Type: Local Privilege Escalation Platform...
Grandstream GSD3710 1.0.11.13 - Stack Overflow
!/usr/bin/env python3 Exploit Title: Grandstream GSD3710 1.0.11.13 - Stack Overflow Date: 2025-05-29 Exploit Author: Pepelux Vendor Homepage: https://www.grandstream.com/ Version: Grandstream GSD3710 - firmware:1.0.11.13 and lower Tested on: Linux and MacOS CVE: CVE-2022-2025 """ Author: Jose Lui...
CVE-2025-48960
Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39938...
CVE-2025-30415
Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40077, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...
CVE-2025-30415
Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40077, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...
CVE-2025-30415
CVE-2025-30415 affects the Acronis Cyber Protect Cloud Agent across Linux, macOS, and Windows. The issue is a denial of service caused by improper handling of malformed input, with affected builds before 40077. The vulnerability’s CVSS v3.0 base metrics indicate NETWORK attack vector, LOW attack ...
CVE-2024-31127 MacOS Zscaler Client Connector Local Privilege Escalation
An improper verification of a loaded library in Zscaler Client Connector on Mac 4.2.0.241 may allow a local attacker to elevate their privileges...
CVE-2024-31127
CVE-2024-31127 affects Zscaler Client Connector for macOS prior to 4.2.0.241. The root cause is improper verification of a loaded library, enabling a local attacker to escalate privileges. Impact is local privilege escalation with HIGH confidentiality/integrity impact and low availability impact ...
PT-2025-74: Local Privilege Escalation (LPE) in Mozilla VPN
The vulnerability was identified in Mozilla VPN, versions 2.27.0 on MacOS. The discovered vulnerability allows an attacker to escalate privileges from a normal user to root. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 04.06.2025 Recommendations: Update to version...
Wireshark 4.2.x < 4.2.12 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.12. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.12 advisory. - Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet...
Parallels Desktop 安全漏洞
Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. A security vulnerability exists in Parallels Desktop for Mac version 20.1.1, which stems from a hard-linking issue in the Snapshot feature that could lead to elevated privileges...
Parallels Desktop prl_vmarchiver Unarchive Hard Link Privilege Escalation
Talos Vulnerability Report TALOS-2024-2126 Parallels Desktop prlvmarchiver Unarchive Hard Link Privilege Escalation June 3, 2025 CVE Number CVE-2024-36486 SUMMARY A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac...
The vulnerability of the XProtect virus detection system for macOS operating systems allows a intruder to gain unauthorized access to protected information.
The vulnerability of the XProtect virus detection system for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
Google Chrome < 137.0.7151.68 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 137.0.7151.68. It is, therefore, affected by multiple vulnerabilities as referenced in the 202506stable-channel-update-for-desktop advisory. - Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remo...