CVE-2025-43226

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2025-43226

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2025-24224

CVE-2025-24224 is a remote-Trigger risk in Apple OS lineages. Affected: tvOS 18.5; iOS 18.5 and iPadOS 18.5; iPadOS 17.7.9; macOS Sequoia 15.5; watchOS 11.5; visionOS 2.5; macOS Ventura 13.7.7. Description: an issue addressed with improved checks that could allow a remote attacker to cause an une...

CVE-2025-24224

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to cause unexpected system termination...

CVE-2025-24224

The issue was addressed with improved checks. This issue is fixed in tvOS 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, watchOS 11.5, visionOS 2.5, macOS Ventura 13.7.7. A remote attacker may be able to cause unexpected system termination...

CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2025-43211

CVE-2025-43211 is corroborated across multiple advisories (Debian DSA-5978-1, DEBIAN:DSA-5978-1, Fedora package advisories, AlmaLinux ALSA notes) as a WebKitGTK/webkit2gtk vulnerability where processing web content may lead to a denial-of-service. Connected documents identify the affected compone...

CVE-2025-43211

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing web content may lead to a denial-of-service...

CVE-2025-43224

CVE-2025-43224 is an out-of-bounds access issue addressed by improved bounds checking. It affects visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6, and iPadOS 18.6. Processing a malicious media file may terminate an app or corrupt memory. Remediation: upgrade to the fixed OS versions listed....

CVE-2025-43209

CVE-2025-43209 is an out-of-bounds access issue in Apple software that is addressed by updates to multiple OSes. Affected and fixed components (as per the CVE entry) include Safari/web content processing and various Apple platforms: macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7, i...

CVE-2025-43234

CVE-2025-43234 involves multiple memory corruption issues fixed by improved input validation in Apple platforms. The NVD entry states vulnerable components are tied to texture handling, with successful exploitation potentially causing an app to terminate unexpectedly. Affected products and fixed ...

CVE-2025-43214

CVE-2025-43214 affects WebKit/GPU-based web content handling used by Safari/WebKitGTK; the issue is a memory handling/processing weakness that may cause an unexpected crash when processing malicious web content. The CVE is listed with CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no...

CVE-2025-43214

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2025-43277

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption...

CVE-2025-31273

CVE-2025-31273 is a memory corruption vulnerability in WebKit-based WebKitGTK/WebKit2GTK when processing malicious web content. Connected advisories confirm the issue and list concrete fixes across multiple distributions: Debian/webkit2gtk packages updated to 2.48.5-1~deb12u1/2.48.5-1~deb11u1, Fe...

CVE-2025-43213

CVE-2025-43213 affects WebKitGTK/WebKitGTK4 in multiple Linux distributions (AlmaLinux, Red Hat family, Fedora, Amazon Linux) and is tied to memory handling issues that can be exploited by processing malicious web content to cause an unexpected Safari/WebKit crash (and related process crashes in ...

PT-2025-31312 · Apple · Tvos +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 and 17.7.9 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 visionOS versions prior to 2.6 Description: An application may be able to acce...

ROS-20250723-01

The vulnerability of the PAM-PKCS11 authentication module of Linux operating systems is related to the fact that the value of the certpolicy defaults to "none". Exploitation of the vulnerability could allow an attacker acting remotely to bypass the authentication process. remotely to bypass the...

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...