CVE-2025-43224

An out-of-bounds access vulnerability exists in multiple Apple products, including visionOS (prior to 2.6), tvOS (prior to 18.6), macOS Sequoia (prior to 15.6), iOS (prior to 18.6), and iPadOS (prior to 18.6). Processing a maliciously crafted media file can trigger this issue, potentially leading...

CVE-2025-43209

An out-of-bounds access issue exists in Safari on multiple Apple platforms, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The vulnerability is caused by insufficient bounds checking when processing maliciously crafted web content , which may result in an unexpected Safari crash . Th...

CVE-2025-43234

Multiple memory corruption issues exist across several Apple operating systems due to insufficient input validation when processing maliciously crafted textures. The vulnerability can lead to unexpected app termination . Affected products include iOS prior to 18.6, iPadOS prior to 18.6, macOS Seq...

CVE-2025-43214

A memory handling issue in the WebKit engine allows an attacker to cause an unexpected Safari crash by processing maliciously crafted web content. This vulnerability affects Safari on macOS Sequoia , iOS , iPadOS , tvOS , visionOS , and watchOS , as well as the WebKitGTK library used in various L...

CVE-2025-43214

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-31277

A buffer overflow vulnerability exists in WebKit due to improper memory handling, which may lead to memory corruption when processing maliciously crafted web content. This flaw affects multiple Apple products, including Safari , iOS , iPadOS , macOS Sequoia , tvOS , visionOS , and watchOS . The v...

CVE-2025-43277

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption...

CVE-2025-31273

Processing maliciously crafted web content may lead to memory corruption due to an issue in the WebKit engine. This vulnerability affects several Apple products, including Safari (prior to 18.6), macOS Sequoia (prior to 15.6), iOS (prior to 18.6), iPadOS (prior to 18.6), tvOS (prior to 18.6), wat...

CVE-2025-43213

A memory handling vulnerability in WebKit allows an attacker to cause an unexpected Safari crash by processing maliciously crafted web content . This issue affects Safari (prior to 18.6), macOS Sequoia (prior to 15.6), iOS (prior to 18.6), iPadOS (prior to 18.6), tvOS (prior to 18.6), watchOS (pr...

PT-2025-31312 · Apple · Tvos +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 and 17.7.9 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 visionOS versions prior to 2.6 Description: An application may be able to acce...

ROS-20250723-01

The vulnerability of the PAM-PKCS11 authentication module of Linux operating systems is related to the fact that the value of the certpolicy defaults to "none". Exploitation of the vulnerability could allow an attacker acting remotely to bypass the authentication process. remotely to bypass the...

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of Windows operating systems, related to synchronization errors when using shared resources, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Search service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Search service in Microsoft Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.

The vulnerability of the Windows Event Tracing service in operating systems is related to the misuse of a trusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the AirPlay Handler component in operating systems such as macOS, iPadOS, iOS, tvOS, and visionOS allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the AirPlay Handler component in operating systems such as macOS, iPadOS, iOS, tvOS, and visionOS is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of protected information...

Microsoft Virtual Hard Disks 安全漏洞

Microsoft Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Virtual Hard Disks. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 Version 22H2 for...

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution...

webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers...

webkitgtk: Logic issue leading to universal cross site scripting attack

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting...