CVE-2025-43509

CVE-2025-43509 affects Apple macOS Sonoma (14.8.3), macOS Sequoia (15.7.3), and macOS Tahoe (26.2). The issue relates to insufficient data protection that could allow an app to access sensitive user data. Apple’s advisories and NVD entry state the vulnerability was addressed by the respective OS ...

CVE-2025-43509

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data...

CVE-2025-43381

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data...

EUVD-2025-203172

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data...

CVE-2025-43381

CVE-2025-43381 concerns macOS Tahoe prior to 26.1, where symbolic link handling could enable a malicious app to delete protected user data. The issue is addressed in macOS Tahoe 26.1 as part of a fix for symlink mishandling. Impact description and remediation indicate that upgrading to Tahoe 26.1...

CVE-2025-46289

CVE-2025-46289 describes a logic issue in macOS file handling that could allow an app to access protected user data. The vulnerability is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, and macOS Tahoe 26.2. Practically, an attacker could exploit improper file handling to leak data under the ...

CVE-2025-46289

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

CVE-2025-46276

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data...

CVE-2025-46276

CVE-2025-46276 is an information-disclosure issue addressed by updates across Apple platforms: watchOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2, iOS 18.7.3/iPadOS 18.7.3, and iOS 26.2/iPadOS 26.2. The connected advisories confirm a vulnerability could allow...

CVE-2025-43465

CVE-2025-43465 affects macOS Tahoe prior to 26.1, where a directory-path parsing flaw could allow an app to access sensitive user data. The issue was fixed in macOS Tahoe 26.1 via improved path validation. Remediation: update to macOS 26.1.

CVE-2025-43388

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43351

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43351

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43517

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

CVE-2025-43517

A privacy issue in macOS log redaction is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2. The flaw allowed an app to access protected user data via log entries; it is addressed by the updated builds listed above. Affected products are macOS variants released around these...

CVE-2025-43521

CVE-2025-43521 describes a downgrade issue affecting Intel-based Macs that was mitigated by adding code-signing restrictions. The issue could allow an app to access sensitive user data, and the vulnerability is fixed in macOS Tahoe 26.2 and macOS Sequoia 15.7.3. Public references in the connected...

CVE-2025-43521

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

CVE-2024-58316

CVE-2024-58316 affects Online Shopping System Advanced 1.0. A SQL injection vulnerability exists in the payment_success.php script, exploitable via the unfiltered, user-controllable cm parameter, enabling attackers to craft SQL queries and potentially retrieve sensitive database information by ma...

CVE-2025-14159

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ayssccpresultsexportfile' AJAX action. This makes it possible for unauthenticated...

CVE-2025-14442 Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...