CVE-2025-43326

A vulnerability in macOS allows an application to perform an out-of-bounds read due to insufficient bounds checking. This flaw could enable an app to access sensitive user data . The issue has been addressed in macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . Specific exploitation de...

CVE-2025-43371

This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox...

CVE-2025-43371

The Xcode integrated development environment for macOS is vulnerable to an Improper Access Control issue within the CoreML component . The root cause is insufficient sandbox checking , which could allow an attacker to bypass sandbox protection mechanisms and cause an application to break out of i...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43311

This vulnerability affects macOS versions prior to Sequoia 15.7 , Sonoma 14.8 , and Tahoe 26 . The root cause is missing entitlement checks , which may allow an application to access protected user data . The issue has been addressed by implementing additional entitlement checks. Remediation is a...

DEBIAN-CVE-2023-53213

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

CVE-2022-50306 ext4: fix potential out of bound read in ext4_fc_replay_scan()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential out of bound read in ext4fcreplayscan For scan loop must ensure that at least EXT4FCTAGBASELEN space. If remain space less than EXT4FCTAGBASELEN which will lead to out of bound read when mounting corrupt file...

GHSA-95HM-PR6Q-298W fast-able is vulnerable to DoS attack through insecure method

The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...

fast-able is vulnerable to DoS attack through insecure method

The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...

PT-2025-37859

Name of the Vulnerable Software and Affected Versions: Xcode version 26 Description: Processing an overly large path value may crash a process. This issue is fixed with improved checks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-37815

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.7 macOS versions prior to 14.8 macOS versions prior to 26 Description: An app may be able to access sensitive user data due to missing entitlement checks. This issue was addressed with additional entitlement checks...

PT-2025-37823

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application with root privileges may be able to access private information due to missing entitlement checks. Recommendations: Update to macOS Tahoe 26...

Temporal OSS Server 安全漏洞

Temporal OSS Server is an open source workflow orchestration engine from Temporal. A security vulnerability exists in Temporal OSS Server versions prior to 1.26.3, prior to 1.27.3, and prior to 1.28.1, which stems from insufficient checking of authorization header boundaries and could lead to...

PT-2025-37817

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data due to missing entitlement checks. Recommendations: Update to macO...

PT-2025-37857

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 26 Description: An application may be able to break out of its sandbox due to insufficient security checks. Recommendations: Update to Xcode version 26...

PT-2025-37844

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: The issue was addressed with improved bounds checks. Processing a maliciously crafted string may lead to heap corruption...

PT-2025-37833

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A file quarantine bypass existed due to missing checks, potentially allowing an application to escape its sandbox...

PT-2025-37794

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 26 Description: An application may be able to read and write files outside of its designated sandbox. This is due to insufficient checks. Recommendations: Update to Xcode version 26...

PT-2025-37792

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.8 Description: A logic issue allowed an application to potentially access user-sensitive data. This issue was resolved with improved checks. Recommendations: Update to macOS version 14.8...