PT-2025-44895

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A validation issue existed due to insufficient input sanitization, potentially allowing an application to gain root privileges. Recommendations Update to...

PT-2025-44843

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A permissions issue existed that could allow an app to cause a denial-of-service. The issue was resolved by removing the vulnerable code. Recommendations...

PT-2025-44927

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description A memory corruption issue exists when processing client messages during device management. This is a stack-based buffer overflow. Recommendations At the...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain an Improvement Check Insufficiency vulnerability that can be exploited by attackers to cause an application to monitor keystrokes without th...

Several Apple products have security vulnerabilities

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in multiple Apple products tha...

Several Apple products have security vulnerabilities

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products, which stems from an...

Photon OS 4.0: Imagemagick PHSA-2025-4.0-0898

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0898. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-13997

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

CVE-2024-13997

Nagios XI prior to 2024R1.1.3 is affected by a privilege-escalation vulnerability in the Migrate Server feature. An authenticated administrator can abuse the migration workflow to obtain root privileges on the underlying XI host, effectively taking full control of the operating system. Root cause...

@react-native-community/cli has arbitrary OS command injection

The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

PT-2025-44889

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description Processing maliciously crafted web content may lead to an unexpected process crash due to improper state management. Recommendations Update to iOS version 18.7.2. Update ...

PT-2025-44871

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 visionOS versions prior to 26.1 Description A permissions issue existed that allowed an application to potentially list the...

PT-2025-44870

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Safari versions prior to 26.1 visionOS versions prior to 26.1 watchOS versions prior to 26.1 tvOS versions prior to 26.1 Description Processing maliciously crafted web content may le...

PT-2025-50988

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A permissions issue existed that could allow an application to access sensitive user data. This issue was addressed through additional sandbox restrictions. Recommendations Update to macOS version 26.1...

PT-2025-44831

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memor...

PT-2025-44897

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description A permissions issue existed that allowed an application to potentially break out of its sandbox. This was addressed through the implementation of additional restrictions...

PT-2025-44894

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A permissions issue existed that allowed an application to potentially access sensitive user data. The issue was resolved by implementing additional...

PT-2025-44850

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.2 Description A permissions issue existed due to insufficient sandbox restrictions, potentially allowing an application to access sensitive user data. Recommendations Update to macOS version 15.7.2 to address the...

PT-2025-50996

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An injection issue existed due to inadequate validation, potentially allowing an application to access sensitive user data. Recommendations Update to macOS version 26.1...

PT-2025-51004

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A logic error existed with inadequate error handling. This issue could prevent iCloud Private Relay from activating when multiple user accounts were simultaneously logged in. Recommendations Update to...