Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iPadOS versions prior to 17.7.9, prior to 18.6, and Apple iOS versions prior to...

Apple Safari and Apple macOS Sequoia security vulnerabilities

Apple Safari and Apple macOS Sequoia are both products of Apple Inc. Apple Safari is a Web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple macOS Sequoia is an operating system. A security vulnerability exists in Apple macOS Sequoia versions prior ...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS that stems from insufficient privilege checking and could lead to accessing sensitive user data. The following products and versions are affected: macOS Sonoma...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by attackers to cause an application to terminate unexpectedly...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed by Apple for Mac computers. An access control error vulnerability exists in Apple macOS, which can be exploited by an attacker to cause unauthorized access to a local network...

Apple macOS Sequoia security vulnerabilities

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. Apple macOS Sequoia and Apple macOS Sonoma contain a security vulnerability that can be exploited by attackers to access sensitive user data...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by an attacker to break through sandbox restrictions...

Linux driver module Heap Buffer Overflow DoS

The vulnerability of the driver module comedi/drivers/das16m1.c in the Linux operating system is related to a violation of the buffer’s initial boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

PAN-OS Unencrypted Storage

The vulnerability of the PAN-OS operating system is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PAN-OS File Path Access Unauthorized Information Disclosure

The vulnerability of the PAN-OS operating system is related to incorrect external management of file names or file paths. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2025-43230

The CoreMedia Playback component in macOS , iOS , iPadOS , watchOS , tvOS , and visionOS contains a vulnerability related to improper authentication and insufficient permissions checks. This flaw could allow an attacker to gain unauthorized access to protected information or user-sensitive data. ...

CVE-2025-43212

Processing maliciously crafted web content in the WebKitGTK component may lead to an unexpected Safari crash . This vulnerability is present in multiple environments, including MiracleLinux 8 and 9 , SUSE SLES15 , and Mageia systems. The issue has been addressed through improved memory handling. ...

CVE-2024-52894

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

RLSA-2025:3026 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Squashfs Heap Buffer Overflow DoS

The vulnerability of the squashfsfillsuper function in the Squashfs component of Linux operating systems is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Johnson Controls iSTAR Ultra security vulnerability

Johnson Controls iSTAR Ultra is an access controller from Johnson Controls, Inc. It provides network resiliency and faster processing speeds. A security vulnerability exists in the Johnson Controls iSTAR Ultra that stems from the presence of OS command injection in the web application, which coul...

TP-Link TL-WPA8630 Sub Process Overflow

The vulnerability of the sub4256CC function in TP-Link TL-WPA8630 router software lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

fbdev Heap Buffer Overflow DoS

The vulnerability of the fbcvthperiod function in the fbdev component of the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...