EUVD-2025-25225

Malicious code in bioql PyPI...

EUVD-2025-11381

Malicious code in bioql PyPI...

EUVD-2025-9002

Malicious code in bioql PyPI...

EUVD-2024-25019

Malicious code in bioql PyPI...

PT-2025-40798

CVE-2025-61847 - Apple Safari Cross-Site Request Forgery CVE ID : CVE-2025-61847 Published : Oct. 3, 2025, 3:15 a.m. | 4 hours, 12 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corrupti...

CVE-2025-10859

Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs This vulnerability affects Firefox for iOS 143.1...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory...

Apple iOS < 26.0.1 Vulnerability (125326)

Binary data appleios2601check.nbin...

PT-2025-39853

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.1 macOS Tahoe versions prior to 26.0.1 macOS Sequoia versions prior to 15.7.1 visionOS versions prior to 26.0.1 iOS versions prior to 26.0.1 iPadOS versions prior to 26.0.1 iOS versions prior to 18.7.1 iPadOS...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc. in the U.S. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. apple visionOS is an operating system for AR glasses. A security vulnerability exists in multiple Apple products that...

Apple Security Update: tvOS 26.0.1

Apple recommends to install security update tvOS 26.0.1 on devices Apple TV HD and Apple TV 4K all models...

Apple Security Update: watchOS 26.0.2

Apple recommends to install security update watchOS 26.0.2 on devices Apple Watch Series 6 and later...

Apple iOS < 18.7.1 Vulnerability (125327)

Binary data appleios1871check.nbin...

About the security content of visionOS 26.0.1

About the security content of visionOS 26.0.1 This document describes the security content of visionOS 26.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of iOS 26.0.1 and iPadOS 26.0.1

About the security content of iOS 26.0.1 and iPadOS 26.0.1 This document describes the security content of iOS 26.0.1 and iPadOS 26.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. "This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms," the Microsoft Threat...

Pointer leaks through pointer-keyed data structures

Posted by Jann Horn, Google Project Zero Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how remote ASLR leaks would be helpful or necessary for exploiting some types of memory corruption bugs, specifically in the context of Apple devices. Coming from...

SUSE CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...