CVE-2025-43243

CVE-2025-43243 is a macOS vulnerability describing a permissions issue that could allow an app to modify protected parts of the file system. The issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. According to the CVE entry, the CVSS v3.1 base score is 9.8 (CRITIC...

CVE-2025-43193

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to cause a denial-of-service...

CVE-2025-43254

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2025-43184

CVE-2025-43184 affects macOS Shortcuts settings handling. The issue involves bypassing sensitive Shortcuts app settings, which was addressed by adding an additional user-consent prompt. Apple patches are available in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.4. The underlyin...

CVE-2025-52899 Tuleap vulnerable to user enumeration via the lost password form

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed ...

ruby:3.3 security update

An update is available for module.ruby, rubygem-pg, ruby, module.rubygem-pg, module.rubygem-mysql2, rubygem-mysql2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

RLSA-2025:9392 Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

RLSA-2025:2452 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-free in WebTransportChild CVE-2025-1931 firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process CVE-2025-1930 firefox:...

RLSA-2025:4043 Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts Rocky Enterprise Software Foundation, and pcmcia configuration files. Security Fixes: BlueZ: Audio Profile AVRCP Improper Validation of Array Inde...

BIT-HARBOR-2025-32019 Harbor's repository description page allows for XSS

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0 and 2.13.0, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in...

About the security content of macOS Sequoia 15.6

About the security content of macOS Sequoia 15.6 This document describes the security content of macOS Sequoia 15.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

VMSA-2025-0014: VMware vCenter updates address a denial-of-service vulnerability (CVE-2025-41241)

Advisory ID: | VMSA-2025-0014.1 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.4 Synopsis: | VMware vCenter updates address a denial-of-service vulnerability CVE-2025-41241 Issue date: | 2025-07-29 Updated on: | 2025-07-30 CVEs | CVE-2025-41241 1. Impacted Products VMware Cloud Foundatio...

PT-2025-31302

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.9 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 Description: The issue involves incorrect symlink resolution prior to file access. Exploitation...

PT-2025-31308 · Apple · Ipados +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.6 iPadOS versions prior to 18.6 and 17.7.9 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 tvOS versions prior to 18.6 watchOS versions prior to 11.6 visionOS versions prior to 2.6...

This Week in Spring - July 29th, 2025

It's the end of July! JULY! The seventh month of the year, done and dusted! AHHHHH! I've got memories of being on a tropical beach over the winter holidays, sipping rum and dodging mosquitoes like I was doing a rhythmic gymnastics routine just recently. It turns out that was seven months ago, not...

thunderbird security update

128.13.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.13.0 - Add OpenELA debranding 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build1...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2025-10862)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10862 advisory. 1:1.8.0.462.b08-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.462.b08-1 - Update to 8u462-b08 GA - Update release notes for 8u462-b08...

PT-2025-31275

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 visionOS versions prior to 2.6 Description The issue was addressed with improved memory...

PT-2025-31296

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. Recommendations Update to watchOS 11.6. Update to iOS...

PT-2025-31289 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: The issue was addressed with improved memory handling. An app may be able to cause a denial-of-service. Recommendations: Update to macOS...