CVE-2025-43243

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system...

CVE-2025-31279

A permissions issue in iPadOS and macOS allows an application to fingerprint the user . This vulnerability has been addressed with additional restrictions. The issue is fixed in the following versions: iPadOS 17.7.9 , macOS Sequoia 15.6 , macOS Sonoma 14.7.7 , and macOS Ventura 13.7.7 . No specif...

CVE-2025-31279

A permissions issue was addressed with additional restrictions. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user...

CVE-2025-31279

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user...

PT-2025-31317 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A permissions issue was addressed with additional restrictions. An application may be able to read files outside of its designated sandbox...

PT-2025-31280 · Apple · Macos Ventura +4

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.9 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 Description: A permissions issue was addressed with additional restrictions. An app may be able ...

PT-2025-31274 · Apple · Macos Sequoia +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 macOS Sequoia versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. An app may be able to gain root privileges...

PT-2025-31318 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A permissions issue was addressed with additional restrictions. An app may be able to modify protected parts of the file system...

PT-2025-31286 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. A malicious app may be able to gain root privileges. Recommendations: Update to macOS version 15.6...

PT-2025-31276 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. A sandboxed process may be able to launch any installed app. Recommendations: Update to macOS version 15.6...

PT-2025-31293 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A permissions issue existed that allowed a malicious application to potentially gain root privileges. The issue was addressed by removing...

PT-2025-31337

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.6 Description A permissions issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions. Recommendations Update to macOS version 15.6...

PT-2025-31322 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A permissions issue was addressed with additional restrictions. A malicious app with root privileges may be able to modify the contents of...

CVE-2025-45467

Unitree Go1 = Go120220511 is vulnerable to Insecure Permissions as the firmware update functionality via Wi-Fi/Ethernet implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation...

Replit AI Agent Deletes Sensitive Data Despite Explicit Instructions

Replit AI agent deleted data from 1,200+ executives and companies without permission, raising concerns about AI safety and control in live environments...

Azure Linux 3.0 Security Update: python3 (CVE-2024-4030)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4030 advisory. - On Windows a directory returned by tempfile.mkdtemp would not always have permissions set to restrict readin...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions due to world-writable permissions set on SBOM files in the file system. An attacker can modify or delete SBOM files by gaining local access to the running image, which may confuse security scanners or disru...

CVE-2025-27613 Gitk can create and truncate files in the user's home directory

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled...

PT-2025-29129 · Alteryx · Alteryx Server

Name of the Vulnerable Software and Affected Versions: Alteryx Server version 2023.1.1.460 Description: An insecure permissions issue in the local storage component of Alteryx Server allows remote attackers to obtain valid user session tokens from localStorage, potentially leading to account...

PT-2025-28376

Name of the Vulnerable Software and Affected Versions: Framework for Galaxy Watch versions prior to SMR Jul-2025 Release 1 Description: The issue is related to incorrect default permissions in the Framework for Galaxy Watch, allowing local attackers to reset some configurations of the Galaxy Watc...