569 matches found
CVE-2025-24087
The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...
CVE-2025-24134
An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data...
CVE-2024-54547
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...
CVE-2025-24103
Technical details (affected product, component, root cause, impact or remediation) for CVE-2025-24103 are not provided in the connected documents; monitor for updates.
CVE-2025-24103
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...
CVE-2025-24103
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...
CVE-2025-24108
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...
CVE-2025-24094
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access user-sensitive data...
Govee Home 安全漏洞
Govee Home is an application from Govee, Inc. A security vulnerability exists in Govee Home version 6.5.01 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which stems from an application that may be able to access protected user data...
PT-2025-5272 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 Description: The issue is related to incorrect permission handling, which may allow an app to access protected user data. This was addressed with additional permissions checks. Recommendations: For versions prior ...
PT-2025-5275 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description: A race condition was addressed with additional validation. This issue may allow an app to access user-sensitive data. The problem is relat...
New Research: The State of Web Exposure 2025
Are your websites leaking sensitive data? New research reveals that 45% of third-party apps access user info without proper authorization, and 53% of risk exposures in Retail are due to the excessive use of tracking tools. Learn how to uncover and mitigate these hidden threats and risks—download...
European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China
Austrian privacy non-profit None of Your Business noyb has filed complaints accusing companies like TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi of violating data protection regulations in the European Union by unlawfully transferring users' data to China. The advocacy group is seeking an...
macOS 14.x < 14.5 Multiple Vulnerabilities (120903)
The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.5. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and...
CVE-2024-44211
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data...
CVE-2024-44292
CVE-2024-44292 describes a privacy issue where an app could access sensitive user data due to insufficient redaction in log entries. Apple fixed this in macOS Sequoia 15.1 by improving private data redaction for logs. The vulnerability affects macOS prior to Sequoia 15.1, and the recommended reme...
Oqtane Framework 安全漏洞
Oqtane Framework is an open source content management system CMS and application framework from Oqtane Open Source. A security vulnerability exists in Oqtane Framework version 6.0.0 and earlier, which stems from an endpoint that does not enforce sufficient authorization checks to validate that a...