CVE-2025-24087

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24134

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data...

CVE-2024-54547

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2024-54547

CVE-2024-54547 affects macOS Dock where an app may access protected user data. The issue was addressed with improved checks and is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. Apple’s security content lists Dock-specific remediation and notes entry added Jan 27, 202...

CVE-2024-54547

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...

CVE-2025-24103

Technical details (affected product, component, root cause, impact or remediation) for CVE-2025-24103 are not provided in the connected documents; monitor for updates.

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24108

CVE-2025-24108 affects macOS Sequoia 15.3 where an access issue could allow an app to access protected user data. The NVD description notes the issue was addressed with additional sandbox restrictions and that the fix is included in macOS Sequoia 15.3. Apple’s security content for Sequoia 15.3 co...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24094

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access user-sensitive data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

Three privacy rules for 2025 (Lock and Code S06E02)

This week on the Lock and Code podcast… It’s Data Privacy Week right now, and that means, for the most part, that you’re going to see a lot of well-intentioned but clumsy information online about how to protect your data privacy. You’ll see articles about iPhone settings. You’ll hear acronyms for...

Govee Home 安全漏洞

Govee Home is an application from Govee, Inc. A security vulnerability exists in Govee Home version 6.5.01 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

KuGou Music 安全漏洞

KuGou Music 酷狗音乐 is a music program from the Chinese company KuGou KuGou。 A security vulnerability exists in KuGou Music iOS version v20.0.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

Pixocial BeautyPlus 安全漏洞

Pixocial BeautyPlus is a photo editor from Pixocial. A security vulnerability exists in Pixocial BeautyPlus version 7.8.010, which stems from an attacker's ability to access sensitive user information by providing a carefully crafted link...

WeSing 安全漏洞

WeSing 全民K歌 is a singing program from the Chinese company WeSing 全民K歌. A security vulnerability exists in WeSing iOS version v9.3.39, which originates from an attacker who can obtain sensitive user information by providing a carefully crafted link...

PT-2025-3355 · Hangzhou Bobo Technology Co · Uu Game Booster

Name of the Vulnerable Software and Affected Versions: Hangzhou Bobo Technology Co Ltd UU Game Booster version 10.6.13 Description: An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For...