Apple macOS Sequoia CoreMedia File Parsing Denial of Service Vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. A denial of service vulnerability exists in Apple macOS Sequoia CoreMedia file parsing, which can be exploited by attackers to cause a denial of service...

Apple watchOS 安全漏洞

Apple watchOS is a set of smartwatch operating systems from Apple USA. A security vulnerability exists in Apple watchOS version 10.4, which stems from processing web content that could lead to arbitrary code execution...

PT-2025-25364

Name of the Vulnerable Software and Affected Versions Apple watchOS versions 11.3.1 and later Apple macOS Ventura versions 13.7.4 and later Apple iOS versions 15.8.4 and later Apple iPadOS versions 15.8.4 and later Apple iOS versions 16.7.11 and later Apple iPadOS versions 16.7.11 and later Apple...

About the security content of iPadOS 17.7.5

About the security content of iPadOS 17.7.5 This document describes the security content of iPadOS 17.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Apple macOS Sequoia Information Disclosure Vulnerability (CNVD-2025-19513)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from an information disclosure vulnerability that is caused due to an information disclosure issue in the FaceTime component when using a specially crafted application. An attacker can...

UK Is Ordering Apple to Break Its Own Encryption

The Washington Post is reporting that the UK government has served Apple with a "technical capability notice" as defined by the 2016 Investigatory Powers Act, requiring it to break the Advanced Data Protection encryption in iCloud for the benefit of law enforcement. This is a big deal, and...

UK Secret Order Demands That Apple Give Access to Users’ Encrypted Data

Plus: Benjamin Netanyahu gives Donald Trump a golden pager, Hewlett Packard Enterprise blames Russian government hackers for a breach, and more...

BIT-GOLANG-2025-22867

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the @executablepath, @loaderpath, or @rpath special values in a "cgo LDFLAGS" directive. This issue only affected go1.24rc2...

Screenshot-Reading Malware

Kaspersky is reporting on a new type of smartphone malware. The malware in question uses optical character recognition OCR to review a device's photo library, seeking screenshots of recovery phrases for crypto wallets. Based on their assessment, infected Google Play apps have been downloaded more...

CVE-2025-1061

The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for...

CVE-2025-1061 Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider

The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for...

CVE-2025-1061 Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider

The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for...

CVE-2025-1061

CVE-2025-1061 (Nextend Social Login Pro, WordPress) is an authentication bypass vulnerability in versions up to and including 3.1.16 caused by insufficient verification of the user during the Apple OAuth authenticate request. This allows unauthenticated attackers to log in as an existing user (e....

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a attacker to cause a service failure.

The vulnerability of the AirPlay technology’s implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to data type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafte...

The vulnerability of the command-line image editing tool Sips in macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the command-line image editing tool Sips in macOS operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the AppleMobileFileIntegrity component in macOS operating systems allows attackers to increase their privileges.

The vulnerability of the AppleMobileFileIntegrity component in macOS operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2025-5899 · Nextend · Nextend Social Login Pro

Name of the Vulnerable Software and Affected Versions: Nextend Social Login Pro versions up to, and including, 3.1.16 Description: The issue is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for...

The vulnerability of the CoreMedia component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a hacker to trigger a service failure.

The vulnerability of the CoreMedia component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the CoreAudio component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a hacker to trigger a service failure.

The vulnerability of the CoreAudio component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS stems from insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a attacker to trigger a service failure.

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...