CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

CVE-2025-43369 affects Apple macOS Tahoe 26, where a mishandling of symlinks can allow an app to access protected user data. The root cause is improper symlink handling that could bypass data protections. A fix is available in macOS Tahoe 26; updating the system to that release is the recommended...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2022-50313 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size

In the Linux kernel, the following vulnerability has been resolved: erofs: fix order = MAXORDER warning due to crafted negative isize As syzbot reported 1, the root cause is that isize field is a signed type, and negative isize is also less than EROFSBLKSIZ. As a consequence, it's handled as fast...

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

...

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

...

Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks

...

CVE-2024-54554

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...

Linux Distros Unpatched Vulnerability : CVE-2024-47191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandle...

CVE-2024-54554

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...

CVE-2024-54554

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...

CVE-2024-54554

The CVE-2024-54554 issue in macOS Sequoia relates to improper handling of symbolic links that could allow an app to access sensitive user data. The vulnerability is addressed in macOS Sequoia 15.1, with the Apple security content listing this CVE under multiple affected components (including area...

CVE-2024-54554

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...

Linux Distros Unpatched Vulnerability : CVE-2024-52522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and...

Linux Distros Unpatched Vulnerability : CVE-2025-38431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that...

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a local authenticated attacker to re...

PT-2025-55078

🟠 CVE-2025-43257 - High This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox. https://t.co/fSGUiEpohJ https://t.co/OOssW71lja...

CVE-2025-38431

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even...