Several Apple products have security vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system.Apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in a number of Apple products that stems from improper memory handling when...

PT-2025-37795

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.48.7-0ubuntu0.25.04.2 WebKitGTK affected versions not specified Description WebKitGTK is a port of the WebKit web rendering engine to the GTK platform. Several security issues were discovered in the WebKitGTK Web...

PT-2025-37839

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 macOS Tahoe versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description The issue was addressed with...

Several Apple products have security vulnerabilities

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple macOS is a specialized operating system developed for Mac computers. Apple macOS is a specialized operating system...

PT-2025-37846

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.8 macOS Sequoia versions prior to 15.7 iOS versions prior to 18.7 iPadOS versions prior to 18.7 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 macOS Tahoe versions prior ...

PT-2025-37806

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A type confusion issue was addressed with improved memory handling. This issue may allow an app to cause a denial-of-service. Recommendations: Update to macOS Tahoe 26...

PT-2025-37800

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: The issue involves improved memory handling. Processing a maliciously crafted image may corrupt process memory. Recommendations: Update to macOS Tahoe 26...

About the security content of Safari 26

About the security content of Safari 26 This document describes the security content of Safari 26. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Linux Distros Unpatched Vulnerability : CVE-2025-27466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related...

CVE-2025-58142

A NULL pointer dereference vulnerability exists in Xen’s viridian implementation by assuming the synthetic interrupt message SIM page is mapped when delivering a synthetic timer message. A malicious x86 HVM guest with the stimer viridian extension enabled could trigger this flaw, leading to a hos...

CVE-2025-58143

A race condition exists in Xen’s viridian implementation during mapping of the reference TSC page. A malicious x86 HVM guest with the referencetsc viridian extension enabled could exploit this flaw to cause Xen to free a page while it is still present in the guest physical-to-machine p2m mappings...

Out-of-bounds Write

org.bouncycastle, bc-fips is vulnerable to Out-of-bounds Write. The vulnerability is due to improper memory handling in org/bouncycastle/jcajce/provider/BaseCipher, which allows an attacker to write data outside the intended memory bounds and potentially execute arbitrary code...

UBUNTU-CVE-2025-58142

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference...

UBUNTU-CVE-2025-27466

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference...

CVE-2025-58142 Mutiple vulnerabilities in the Viridian interface

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference...

CVE-2025-58142

The Xen hypervisor is vulnerable to a NULL pointer dereference within the Viridian interface (XSA-472). The root cause is an incorrect assumption that the SIM page is mapped when a synthetic timer message needs to be delivered. This issue could potentially lead to a denial of service or other imp...

Linux Distros Unpatched Vulnerability : CVE-2024-23226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4...

Linux Distros Unpatched Vulnerability : CVE-2020-1547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first...

USN-7740-1 libetpan vulnerability

It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : Ruby vulnerabilities (USN-7734-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7734-1 advisory. It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this...