CVE-2025-43501

A buffer overflow vulnerability exists in WebKitGTK , WPE WebKit , and several Apple products (Safari, iOS, iPadOS, macOS Tahoe, and visionOS) due to improper memory handling. Processing maliciously crafted web content can trigger this flaw, leading to an unexpected process crash or service failu...

CVE-2025-62848

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build...

QuTS Memory Use After Free

The vulnerability of the QuTS operating systems and QTS network devices involves the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain increased privileges...

QuTS Memory Use After Free Code Execution

The vulnerability of the QuTS operating systems and QTS network devices involves the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain increased privileges...

Several Apple products have security vulnerabilities

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is a set of operating systems developed for mobile devices. apple iPadOS is a set of operating systems for the iPad tablet...

GHSA-W853-JP5J-5J7F filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

Impact A Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation where filelock checks if a file exists before opening it with OTRUNC. An attack...

CVE-2025-62847

An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to alter execution logic. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-62848

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build...

CVE-2025-62847

An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to alter execution logic. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-62847 QTS, QuTS hero

An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to alter execution logic. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-43542

This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime...

CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpect...

PT-2025-51037

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.2 iOS versions prior to 18.7.3 iOS versions prior to 26.2 iPadOS versions prior to 18.7.3 iPadOS versions prior to 26.2 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2 tvOS versions prior to 26.2...

WebKit Safari Data Compromise

The vulnerability of the WebKit component in the Safari browser on operating systems such as watchOS, iOS, iPadOS, tvOS, and visionOS is related to insufficient input validation. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility...

Windows File Explorer Driver Privilege Escalation

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

DirectX Graphics Kernel System Failure

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft DWM Core Library Privilege Escalation

The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Routing and Remote Access Service RCE

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Projected File System security vulnerabilities

Microsoft Projected File System is an application system from Microsoft USA. It projects hierarchical data into the file system so that it appears as files and directories in the file system. A security vulnerability exists in Microsoft Projected File System. An attacker could exploit the...

Qnap QTS and QuTS hero Out-of-Bounds Write (CVE-2025-30273)

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...