42653 matches found
CVE-2025-43400
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corrupti...
CVE-2025-10859
Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs This vulnerability affects Firefox for iOS 143.1...
CVE-2025-43400
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory...
Apple iOS < 26.0.1 Vulnerability (125326)
Binary data appleios2601check.nbin...
PT-2025-39853
Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.1 macOS Tahoe versions prior to 26.0.1 macOS Sequoia versions prior to 15.7.1 visionOS versions prior to 26.0.1 iOS versions prior to 26.0.1 iPadOS versions prior to 26.0.1 iOS versions prior to 18.7.1 iPadOS...
Apple多款产品 安全漏洞
Apple iOS and others are products of Apple Inc. in the U.S. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. apple visionOS is an operating system for AR glasses. A security vulnerability exists in multiple Apple products that...
Apple Security Update: tvOS 26.0.1
Apple recommends to install security update tvOS 26.0.1 on devices Apple TV HD and Apple TV 4K all models...
Apple Security Update: watchOS 26.0.2
Apple recommends to install security update watchOS 26.0.2 on devices Apple Watch Series 6 and later...
Apple iOS < 18.7.1 Vulnerability (125327)
Binary data appleios1871check.nbin...
About the security content of visionOS 26.0.1
About the security content of visionOS 26.0.1 This document describes the security content of visionOS 26.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of iOS 26.0.1 and iPadOS 26.0.1
About the security content of iOS 26.0.1 and iPadOS 26.0.1 This document describes the security content of iOS 26.0.1 and iPadOS 26.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module
Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. "This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms," the Microsoft Threat...
Pointer leaks through pointer-keyed data structures
Posted by Jann Horn, Google Project Zero Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how remote ASLR leaks would be helpful or necessary for exploiting some types of memory corruption bugs, specifically in the context of Apple devices. Coming from...
SUSE CVE-2025-10920
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...
SUSE CVE-2025-43272
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...
A week in security (September 15 – September 21)
Last week on Malwarebytes Labs: ChatGPT Deep Research zero-click vulnerability fixed by OpenAI Disrupted phishing service was after Microsoft 365 credentials Update your Chrome today: Google patches 4 vulnerabilities including one zero-day Age verification and parental controls coming to ChatGPT ...
Apple macOS Tahoe Underchecked Vulnerability
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22678)
Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system.Apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in a number of Apple products that stems from insufficient checks when handling...
Apple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGG aud...