CVE-2025-43206: Improper Limitation of a Pathname to a Restricted Directory

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from an input validation error vulnerability that can be exploited by an attacker to gain access to sensitive user data...

WordPress Affiliate Plus Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress Affiliate Plus, which stems from missing or incorrect random number validation, and can be exploited by an...

CVE-2025-43197

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data...

CVE-2025-43197

A vulnerability in the Single Sign-On component of macOS operating systems allows a perpetrator to gain unauthorized access to confidential data due to deficiencies in the authentication mechanism . This issue is addressed with additional entitlement checks . The vulnerability is fixed in macOS S...

CVE-2025-43206

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access protected user data...

CVE-2025-43206

A path traversal vulnerability exists in Apple macOS due to a parsing issue in handling directory paths. This flaw allows an application to potentially access protected user data . The issue has been addressed with improved path validation and is fixed in macOS Sequoia 15.6 , macOS Sonoma 14.7.7 ...

CVE-2025-43206

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

CVE-2025-43233

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-43233

A vulnerability in the HTTPS protocol implementation on macOS systems allows a malicious app acting as a HTTPS proxy to gain unauthorized access to sensitive user data . The root cause is attributed to deficiencies in access control . This issue is fixed in macOS Sequoia 15.6 , macOS Sonoma 14.7....

CVE-2025-43245

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

CVE-2025-43245

A downgrade issue exists in Apple macOS where an application could potentially access protected user data . This vulnerability was addressed by implementing additional code-signing restrictions . The issue is fixed in the following versions: macOS Sequoia 15.6 , macOS Sonoma 14.7.7 , and macOS Ve...

CVE-2025-43245

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

CVE-2025-43195

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data...

CVE-2025-43195

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data...

CVE-2025-43195

A vulnerability exists in the handling of environment variables within macOS , specifically involving insufficient validation of input data in the CoreServices component. This flaw could allow an attacker to gain unauthorized access to protected information or sensitive user data . The issue is a...

CVE-2025-43198

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data...

CVE-2025-43198

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data...

CVE-2025-43198

A security vulnerability in Apple macOS allows an application to access protected user data . The issue, rooted in deficiencies in access control , was addressed by removing the vulnerable code. This vulnerability is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7 . Specific details regarding...

CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...