CVE-2024-54547

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2024-54547

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2024-54547

CVE-2024-54547 affects macOS Dock where an app may access protected user data. The issue was addressed with improved checks and is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. Apple’s security content lists Dock-specific remediation and notes entry added Jan 27, 202...

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...

CVE-2025-24103

Technical details (affected product, component, root cause, impact or remediation) for CVE-2025-24103 are not provided in the connected documents; monitor for updates.

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24108

CVE-2025-24108 affects macOS Sequoia 15.3 where an access issue could allow an app to access protected user data. The NVD description notes the issue was addressed with additional sandbox restrictions and that the fix is included in macOS Sequoia 15.3. Apple’s security content for Sequoia 15.3 co...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24094

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access user-sensitive data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

Three privacy rules for 2025 (Lock and Code S06E02)

This week on the Lock and Code podcast… It’s Data Privacy Week right now, and that means, for the most part, that you’re going to see a lot of well-intentioned but clumsy information online about how to protect your data privacy. You’ll see articles about iPhone settings. You’ll hear acronyms for...

Pixocial BeautyPlus 安全漏洞

Pixocial BeautyPlus is a photo editor from Pixocial. A security vulnerability exists in Pixocial BeautyPlus version 7.8.010, which stems from an attacker's ability to access sensitive user information by providing a carefully crafted link...

PT-2025-3363 · Tencent · Wesing

Name of the Vulnerable Software and Affected Versions: Tencent Technology Shanghai Co., Ltd WeSing iOS version 9.3.39 Description: An issue in WeSing iOS allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 9.3.39, avoid using links from...

Govee Home 安全漏洞

Govee Home is an application from Govee, Inc. A security vulnerability exists in Govee Home version 6.5.01 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

WeSing 安全漏洞

WeSing 全民K歌 is a singing program from the Chinese company WeSing 全民K歌. A security vulnerability exists in WeSing iOS version v9.3.39, which originates from an attacker who can obtain sensitive user information by providing a carefully crafted link...

Xiaowu Information BeiKe Holdings 安全漏洞

Xiaowu Information BeiKe Holdings Shell is a rent and buy software from China-based Xiaowu Information. A security vulnerability exists in Xiaowu Information BeiKe Holdings version 1.3.50, which originates from an attacker being able to obtain sensitive user information by providing a carefully...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which stems from an application that may be able to access protected user data...

KuGou Music 安全漏洞

KuGou Music 酷狗音乐 is a music program from the Chinese company KuGou KuGou。 A security vulnerability exists in KuGou Music iOS version v20.0.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...