ColdFusion Command Injection Code Execution

The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code...

libxml2 XSS

The vulnerability of the libxml2 and libxpc libraries in MacOS, iPadOS, and iOS operating systems stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CoreText Unauthorized Access

The vulnerability of the CoreText component in iPadOS, iOS, tvOS, and MacOS operating systems relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Power Management DoS

The vulnerability of the Power Management component in operating systems such as visionOS, MacOS, tvOS, iPadOS, and iOS is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause service failures...

Safari Code Execution

The vulnerability of the Safari browser in operating systems such as visionOS, macOS, iOS, and iPadOS is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RepairKit Component Data Compromise

The vulnerability of the RepairKit component in iPadOS, iOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality of protected information...

MacOS Access Control Read Modify

The vulnerability of MacOS operating systems is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain read and modify access to system files...

MacOS Heap Buffer Overflow

The vulnerability of MacOS operating systems is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Baseband Component Network Interception

The vulnerability of the Baseband component in iPadOS and iOS systems relates to the transmission of confidential information in plaintext. Exploiting this vulnerability could allow a malicious actor to intercept network traffic remotely...

CoreMedia DoS

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS relates to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to deficiencies in the mechanism for checking input data. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

Scripting Engine Code Execution

The vulnerability of the Scripting Engine component in Edge and Internet Explorer browsers on Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted link...

FaceTime DoS

The vulnerability of the FaceTime video/audio call technology in iPadOS and iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0522

Updates of 'libsoup', 'redis', 'gnuplot' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-5.0-92-0522

Updates of 'gnuplot' packages of Photon OS have been released...

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

2025-05 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5058385)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

CVE-2025-47276

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems OS. Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer...

CVE-2025-47276 Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2i

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems OS. Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer...

CVE-2025-47276

Actualizer (a Debian OS creator) is affected by CVE-2025-47276 in versions before 1.2.0, due to using OpenSSL’s -passwd which hashes with SHA-512. The vulnerability pertains to password hashing quality for root and Alpha accounts across full OS deployments. Remediation is to upgrade to Actualizer...