Lucene search
+L

42665 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.12 views

Apple macOS USD importMeshes Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

7.8CVSS6.6AI score0.00401EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.5 views

PT-2025-31346

Name of the Vulnerable Software and Affected Versions Apple macOS MediaToolbox Framework affected versions not specified Description The Apple macOS MediaToolbox Framework contains a memory corruption issue that could lead to remote code execution. The vulnerability was discovered by Hossein Lotf...

6.3CVSS7.4AI score0.0037EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.10 views

PT-2025-31294 · Apple · Safari +9

Name of the Vulnerable Software and Affected Versions: Apple Safari affected versions not specified watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 iPadOS version 17.7.9 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 macOS Sonoma versions...

9.8CVSS5.9AI score0.00882EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.7 views

PT-2025-31352

Name of the Vulnerable Software and Affected Versions Apple macOS affected versions not specified Description The USD importMeshJointWeights and USD importMeshes functionalities in Apple macOS contain heap-based buffer overflow vulnerabilities. These issues can lead to remote code execution...

8.8CVSS7.5AI score0.00401EPSS
SaveExploits0References7
Apple
Apple
added 2025/07/29 12:00 a.m.40 views

About the security content of watchOS 11.6

About the security content of watchOS 11.6 This document describes the security content of watchOS 11.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

9.8CVSS7.8AI score0.75832EPSS
SaveExploits6References1Affected Software1
Apple
Apple
added 2025/07/29 12:00 a.m.14 views

About the security content of visionOS 2.6

About the security content of visionOS 2.6 This document describes the security content of visionOS 2.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

9.8CVSS7.8AI score0.75832EPSS
SaveExploits6References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.16 views

PT-2025-31290 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: An application may be able to modify protected parts of the file system due to insufficient checks. Recommendations: Update to macOS versi...

10CVSS6.6AI score0.00737EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.6 views

PT-2025-31305 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.7 iPadOS versions prior to 17.7.9 iOS versions prior to 18.6 macOS Sonoma versions prior to 14.7.7 watchOS versions prior to 11.6 macOS Sequoia versions prior to 15.6 tvOS versions prior to 18.6 visionOS versions...

7.8CVSS5.4AI score0.00945EPSS
SaveExploits0References15
Apple
Apple
added 2025/07/29 12:00 a.m.24 views

About the security content of iOS 18.6 and iPadOS 18.6

About the security content of iOS 18.6 and iPadOS 18.6 This document describes the security content of iOS 18.6 and iPadOS 18.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

9.8CVSS7.8AI score0.012EPSS
SaveExploits1References1Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.9 views

Apple Safari JavaScriptCore WasmToJSException Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

8.8CVSS6.2AI score0.00961EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.11 views

Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD...

3.3CVSS5.5AI score0.00217EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.11 views

Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD...

3.3CVSS5.4AI score0.00261EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.9 views

Apple macOS AudioToolbox MP4 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioToolbox...

7.8CVSS6.3AI score0.01114EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.10 views

Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD...

3.3CVSS5.4AI score0.01127EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.11 views

Apple macOS USD readAccessorDataToFloat Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD...

3.3CVSS5.4AI score0.01127EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.11 views

Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICC...

7.8CVSS6.3AI score0.00231EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.12 views

Apple macOS USD importSkeletons Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

7.8CVSS6.6AI score0.00427EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/07/29 12:00 a.m.11 views

Apple macOS AppleIntelKBLGraphics Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS5.2AI score0.00198EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.7 views

PT-2025-31300

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 iPadOS version 17.7.9 tvOS versions prior to 18.6 macOS versions prior to Sequoia 15.6 visionOS versions prior to 2....

10CVSS7.9AI score0.09585EPSS
SaveExploits4References192
GithubExploit
GithubExploit
added 2025/07/27 5:22 p.m.209 views

Exploit for Improper Handling of Insufficient Permissions or Privileges in Apple Macos

CVE-2023-42931 The exploit targets a LPE works on macOS 14.0-1...

8.3CVSS3.8AI score0.01171EPSS
SaveExploits2
Rows per page
Query Builder