EUVD-2026-50941

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-13833

Google Chrome on Mac versions prior to 150.0.7871.47 is vulnerable to an Uninitialized Use in ANGLE . This flaw allows a remote attacker to leak cross-origin data by having a user navigate to a crafted HTML page . The issue affects Chromium-based browsers, including Microsoft Edge and Chromium pa...

EUVD-2026-33147

Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-33874

Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, the Mac OS version of the Authenticator is vulnerable to remote code execution, triggered when victims open a malicious file. Update the gematik...

Apple macOS security vulnerabilities

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. There is a security vulnerability in Apple macOS, which stems from logging issues, potentially allowing applications to access sensitive user data. The following versions are affected: macOS...

PT-2025-6859 · Citrix · Citrix Secure Access Client For Mac

Name of the Vulnerable Software and Affected Versions: Citrix Secure Access Client for Mac affected versions not specified Description: An attacker can gain application privileges to perform limited modification and/or read arbitrary data. Recommendations: At the moment, there is no information...

SUSE CVE-2016-4226

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174,...

Trend Micro Antivirus for MAC vulnerable to privilege escalation

Overview Trend Micro Incorporated has released a security update for Trend Micro Antivirus for MAC. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A user who can log in to the system where the affected product is installed may...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Apple macOS is a suite of specialized operating systems from Apple Inc. developed specifically for Mac computers. A privilege-granting and access-control issue vulnerability previously existed in Apple macOS Monterey 12.0.1, which arose from the possibility that someone with access to the host Ma...

iOS Mac OS X Code Execution

The vulnerability of the Carbon component in iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure application termination using a specially created DFONT file...

Mac OS X Access Restriction Bypass

The vulnerability of the FinderKit component in the Mac OS X operating system exists due to insufficient checks on access rights. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by leveraging privilege escalation...

iOS Mac OS X Code Execution

The vulnerability of ICU operating systems for iOS and Mac OS X arises from the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application termination by using a...

Mac OS X Privilege Escalation

The vulnerability of the Mac OS X operating system’s login window exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

Mac OS X Privilege Escalation

The vulnerability of the NVIDIA Graphics Drivers subsystem for the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or trigger a service failure memory corruption through a specially...

iOS Mac OS X Privilege Escalation

The vulnerability of the kernel in iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a specially created application...

CVE-2016-1015

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified "type confusion," a different vulnerability than...

flash-plugin: multiple code execution issues fixed in APSB15-32

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

Mac OS X DoS

The vulnerability of the EFI component in the Mac OS X operating system is related to errors in specifying the range of protected registers. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted application...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context through a specially crafted applicatio...

Claris Emailer buffer over flow vulnerabirity

If already published, already fix it, too much old infomation, please send trash box :- At least 2.0v2 is not fixed if Apple does't tell a lie. --------------------------------------------------------------------- Claris Emailer buffer over flow vulnerabirity Problem first discoverd:2000.7.26...