CVE-2025-43391

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43442

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed...

CVE-2025-43452

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen...

CVE-2025-43433

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products that stems from insufficient...

PT-2025-44913

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 visionOS versions prior to 26.1 watchOS versions prior to 26.1 Description A privacy issue existed where an application could potentially fingerprint a user. This was addressed by...

TencentOS Server 4: poppler (TSSA-2025:0830)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0830 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2025-50997

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to obtain elevated privileges, specifically root access. The issue was resolved through enhanced security checks. Recommendations Update to version 26.1 or later...

PT-2025-44863

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 Safari versions prior to 26.1 visionOS versions prior to 26.1 Description A flaw exists due to improper state management. Processing specially designed web...

CVE-2025-54605

Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption issue 2 of 2...

CVE-2025-54604

Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption issue 1 of 2...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core version 29.0 and earlier, which stems from uncontrolled resource consumption...

October 28, 2025—KB5067112 (OS Build 22631.6133) Preview

None None...

CVE-2025-54604

Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption issue 1 of 2...

CVE-2025-54605

CVE-2025-54605 affects Bitcoin Core up to version 29.0, with an issue described as Uncontrolled Resource Consumption. The connected documents consistently state the vulnerability outcome but do not provide concrete exploit paths, affected subcomponents, or a confirmed fix/patch version. The impac...

Node.js: fs.futimes() Bypasses Read-Only Permission Model

A flaw in Node.js's permission model was discovered that allowed a file's access and modification timestamps to be changed via futimes even when the process had only read permissions. Unlike utimes, futimes did not apply the expected write-permission checks, which meant file metadata could be...

CVE-2025-56320

Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in circulation."...

CVE-2025-61804 Animate | Heap-based Buffer Overflow (CWE-122)

Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

2025-10 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-10 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5066791)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...