The vulnerability of the FrontBoard component in iPadOS and iOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FrontBoard component in iPadOS and iOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of MacOS operating systems, related to reading beyond the buffer limit of memory, allows an attacker to execute arbitrary code.

The vulnerability of MacOS operating systems is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Baseband component in iPadOS and iOS operating systems allows attackers to intercept network traffic.

The vulnerability of the Baseband component in iPadOS and iOS systems relates to the transmission of confidential information in plaintext. Exploiting this vulnerability could allow a malicious actor to intercept network traffic remotely...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0522

Updates of 'redis', 'gnuplot', 'libsoup' packages of Photon OS have been released...

The vulnerability of the ColdFusion software platform, related to the failure to take measures to neutralize special elements used in the operating system’s command set, allows attackers to circumvent existing security restrictions and execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code...

The vulnerability of the Scripting Engine component in browsers Edge and Internet Explorer on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Scripting Engine component in Edge and Internet Explorer browsers on Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted link...

The vulnerability of MacOS operating systems, related to access control deficiencies, allows attackers to gain read and modify access to system files.

The vulnerability of MacOS operating systems is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain read and modify access to system files...

The vulnerability of the CoreText component in iPadOS, iOS, tvOS, and MacOS operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the CoreText component in iPadOS, iOS, tvOS, and MacOS operating systems relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of FaceTime video/audio call technology in operating systems iPadOS and iOS, which allows a perpetrator to cause service failure.

The vulnerability of the FaceTime video/audio call technology in iPadOS and iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerabilities of the libxml2 and libxpc libraries in MacOS, iPadOS, iOS operating systems allow attackers to execute XSS attacks.

The vulnerability of the libxml2 and libxpc libraries in MacOS, iPadOS, and iOS operating systems stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the personal assistant Siri in operating systems such as MacOS, iPadOS, and iOS allows attackers to disclose confidential information.

The vulnerability of the personal assistant Siri in operating systems such as MacOS, iPadOS, and iOS is related to access control errors. Exploiting this vulnerability can allow attackers to disclose confidential information...

PT-2025-29485 · Мартин Прикрыл · Winscp

Уязвимость графического клиента протоколов SFTP и SCP WinSCP операционной системы Windows связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю создать специальный файл и контролировать его путь на удаленном сервере...

Palo Alto Networks PAN-OS 代码问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from a lack of anomaly checking could lead to a denial of service attack...

The vulnerability of the RepairKit component in iPadOS, iOS, and visionOS allows attackers to compromise the confidentiality of protected information.

The vulnerability of the RepairKit component in iPadOS, iOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality of protected information...

The vulnerability of the Safari browser on operating systems such as visionOS, macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the Safari browser in operating systems such as visionOS, macOS, iOS, and iPadOS is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS allows a hacker to trigger a service failure.

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS relates to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of FaceTime video/audio call technology in operating systems iPadOS and iOS allows a perpetrator to cause a service failure.

The vulnerability of FaceTime video telephony technology in iPadOS and iOS operating systems is related to the incorrect duration of a call session. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the Power Management component in operating systems such as visionOS, MacOS, tvOS, iPadOS, and iOS allows attackers to trigger service failures.

The vulnerability of the Power Management component in operating systems such as visionOS, MacOS, tvOS, iPadOS, and iOS is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

2025-05 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5058385)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...