CVE-2024-54517

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory...

CVE-2024-54541

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2025-24113

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing...

PT-2025-20742 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 macOS Sonoma versions prior to 14.7.6 visionOS versions prior to 2.3 iPadOS versions prior to 17.7.7 watchOS versions prior to 11.3 macOS Ventura versions prior to 13.7.6 iOS versions prior to 18.3 iPadOS versions...

The vulnerability of the client authenticity verification mechanism in Microsoft Digest operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the client authenticity verification mechanism in Microsoft Digest operating systems for Windows is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a remote attacker to execute...

VulnCheck KEV: CVE-2025-24085

Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges...

PT-2025-47806

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 visionOS versions prior to 2.5 macOS Sonoma versions prior to 14.7.3 macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.5 watchOS versions prior to 11.5...

CVE-2025-23090 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: opentofu, terraform...

The vulnerability of the QuTS operating systems and QTS network devices from Qnap, related to improper handling of data with URL encoding, allows attackers to execute arbitrary code.

The vulnerability of the QuTS operating systems and QTS network devices involves improper handling of data with URL encoding. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Message Queuing (MSMQ) service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Microsoft Message Queuing (MSMQ) service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution...

CVE-2024-40771

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel...

CVE-2024-54535

Affected product: Apple Vision Pro (calendar feature). Issue: a path handling vulnerability could allow an attacker with access to calendar data to read reminders. Root cause: path handling logic was reworked with improved validation. Affected OS updates and patches: watchOS 11.1, visionOS 2.1, i...

CVE-2024-40771

CVE-2024-40771: Apple iOS/iPadOS/macOS/watchOS/tvOS/visionOS kernel-privilege code execution vulnerability addressed by memory-handling improvements. Fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, visionOS 1.2, iOS 16.7.8 / iPadOS 16.7.8, iOS 17.5 / iPadOS 17.5, watchOS ...

CVE-2024-27856

CVE-2024-27856 affects the WebKitGTK/ WebKit component used by Apple platforms in the provided set (macOS, iOS, iPadOS, watchOS, tvOS, visionOS). The description across connected advisories states the issue can cause an unexpected app termination or arbitrary code execution when processing a file...

CVE-2025-0437 vulnerabilities

Vulnerabilities for packages: chromium...

Security flaws found in tiny phones promoted to children

TL;DR Three mini smartphones promoted to children were analysed Those devices are heavily promoted on TikTok All had outdated operating systems All could be rooted without wiping the phone, allowing data to be compromised with physical access One had malware artefacts pre-installed One had an...

The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to induce a service failure.

The vulnerability of the Kerberos protocol for Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...