Assets Component Sandbox Bypass

The vulnerability of the Assets component in iOS, iPadOS, macOS, tvOS, and visionOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms...

Contacts Component iOS iPadOS Unauthorized Access

The vulnerability of the Contacts component in iOS and iPadOS operating systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Stolen Device Protection iOS iPadOS Disable

The vulnerability of the Stolen Device Protection function in iOS and iPadOS operating systems is related to insufficient protection for service data. Exploiting this vulnerability could allow a hacker to disable the Stolen Device Protection function...

Apple Account Unauthorized Access

The vulnerability of the Apple Account component in operating systems such as iOS, iPadOS, watchOS, and visionOS is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS suffers from a security vulnerability that stems from a third-party component exposing passwords in process parameters, which can be exploited by an attacker to cause low-privilege user access...

SAP Business Connector path traversal vulnerability

SAP Business Connector is a middleware from SAP, Germany. SAP Business Connector suffers from a path traversal vulnerability that can be exploited by an attacker to traverse directories on the system to read, write, overwrite, and delete arbitrary files on the host system...

Microsoft Windows Ancillary Function Driver for WinSock: Race Condition Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate...

Zephyr security vulnerabilities

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from a contention condition in the entry point of a system call, which could lead to elevation of privilege by a malicious userspace process...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS suffers from a security vulnerability that stems from a symbolic link attack that could lead to elevation of privilege...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from improper configuration file permissions and insufficient input validation, which could lead to elevated privileges...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS suffers from a security vulnerability that stems from an escalation of privilege issue that could result in a VAPIX Administrator privileged user gaining Linux Root privileges...

Important Photon OS Security Update - PHSA-2025-4.0-0904

Updates of 'unbound' packages of Photon OS have been released...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from insufficient input validation, which could lead to process crashes and affect availability...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to path traversal attacks and elevation of privilege...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to arbitrary code execution...

AXIS OS security vulnerabilities

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that originates from a malicious ACAP application that can obtain administrator-level service account credentials used by a legitimate ACAP application, potentially resulting in elevated privileges f...

SAP Business Connector: Operating System Command Injection Vulnerability

SAP Business Connector is a middleware from SAP, Germany. SAP Business Connector suffers from an operating system command injection vulnerability that stems from OS command injection and could lead to the execution of arbitrary operating system commands...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Display Virtualization for Windows OS Advisory

Summary: A potential security vulnerability in some Display Virtualization for Windows OS software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20065 Description: Uncontrolled search path fo...

Microsoft Windows Access Control Error Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...