42665 matches found
Apple Multiple Products Unspecified Vulnerability
Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link...
Apple MacOSX Security Update (HT122900)
Apple Mac OS X is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-43200
This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed...
Apple MacOSX Security Update (HT122902)
Apple Mac OS X is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple MacOSX Security Update (HT122901)
Apple Mac OS X is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Paragon Spyware Used to Spy on European Journalists
Paragon is an Israeli spyware company, increasingly in the news now that NSO Group seems to be waning. "Graphite" is the name of its product. Citizen Lab caught it spying on multiple European journalists with a zero-click iOS exploit: On April 29, 2025, a select group of iOS users were notified b...
Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware
Apple has disclosed that a now-patched security flaw present in its Messages app was actively exploited in the wild to target civil society members in sophisticated cyber attacks. The vulnerability, tracked as CVE-2025-43200, was addressed on February 10, 2025, as part of iOS 18.3.1, iPadOS 18.3....
Exploit for Use After Free in Apple Ipados
CVE-2025-24252 iOS "Airborne" Vulnerabilities - Log Artifact E...
VulnCheck KEV: CVE-2025-43200
Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link...
Apple Intelligence Is Gambling on Privacy as a Killer Feature
Many new Apple Intelligence features happen on your device rather than in the cloud. While it may not be flashy, the privacy-centric approach could be a competitive advantage...
Malicious code in apple-appstore-server-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ffc44075c7a6123e6fd516c9e8c1abbd98b481d26ae67ee10e814bec86bbe7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-31298
Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. Recommendations Update to watchOS 11.6. Update to iOS...
CVE-2025-29627
An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication Module...
The vulnerability of operating systems visionOS, iOS, iPadOS, tvOS, and macOS, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of operating systems visionOS, iOS, iPadOS, tvOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Keeper Security KeeperChat IOS Application 安全漏洞
Keeper Security KeeperChat IOS Application is a chat application from Keeper Security, USA. A security vulnerability exists in Keeper Security KeeperChat IOS Application version 5.8.8, which stems from a flaw in the biometric authentication module that could lead to elevation of privilege...
Malicious code in apple-api-fake (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d50287073ec50503a3def9a3bd2b04b18b45b30a55b983b4e5f50ccc00b8a7 Any computer that has this package installed or running should be considered...
MAL-2025-4730 Malicious code in apple-api-fake (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d50287073ec50503a3def9a3bd2b04b18b45b30a55b983b4e5f50ccc00b8a7 Any computer that has this package installed or running should be considered...
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
Cybersecurity researchers are alerting to a new malware campaign that employs the ClickFix social engineering tactic to trick users into downloading an information stealer malware known as Atomic macOS Stealer AMOS on Apple macOS systems. The campaign, according to CloudSEK, has been found to...
PT-2025-24328
A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto post/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpD...
The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS allows a perpetrator to bypass the sandbox protection mechanisms and gain unauthorized access to protected information.
The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms and...