CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious JAR file may bypass Gatekeeper checks...

CVE-2025-24148

CVE-2025-24148 affects macOS where the issue stems from improved handling of executable types, allowing a malicious JAR to bypass Gatekeeper checks. Active impact details in the provided data come from macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5 address the vulnerability. The C...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia that stems from a malicious JAR file that could bypass Gatekeeper checks...

PT-2025-13872

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description The issue allows a malicious JAR file to bypass Gatekeeper checks due to improper handling of executable types. Recommendatio...

Important: Red Hat Security Advisory: Gatekeeper v3.15.4

Gatekeeper v3.15.4 Gatekeeper v3.15.4 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

Important: Red Hat Security Advisory: Gatekeeper v3.18.0

Gatekeeper v3.18.0 Gatekeeper v3.18.0 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: buildkitd, syft, docker-cli-buildx, opa, k8ssandra-client, wolfictl, helm-operator, k8sgpt, kubescape, cluster-api-helm-controller, kargo, xeol, kubevela, melange, eksctl, zot, kaniko, dagger, osv-scanner, fuse-overlayfs-snapshotter, docker-compose, ctop,...

Important: Red Hat Security Advisory: Gatekeeper v3.17.2

Gatekeeper v3.17.2 Gatekeeper v3.17.2 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cri-tools, ip-masq-agent, prometheus-pushgateway, kustomize, s5cmd, yam, controller-gen, kyverno-policy-reporter, nfs-subdir-external-provisioner, metallb, vexctl, aws-flb-firehose, doppler-kubernetes-operator, kubevela, kpt, caddy, kubernetes-dashboard,...

Important: Red Hat Security Advisory: Gatekeeper v3.15.3

Gatekeeper v3.15.3 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes subscription. Red Hat Produ...

Important: Red Hat Security Advisory: Gatekeeper v3.17.1

Gatekeeper v3.17.1 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes subscription. Red Hat Produ...

Important: Red Hat Security Advisory: Gatekeeper v3.14.3

Gatekeeper v3.14.3 Gatekeeper is a validating webhook with auditing capabilities that can enforce custom resource definition-based policies that are run with the Open Policy Agent OPA. Gatekeeper is supported through a Red Hat Advanced Cluster Management for Kubernetes subscription. Red Hat Produ...

GHSA-6WXM-MPQJ-6JPF vulnerabilities

Vulnerabilities for packages: smarter-device-manager, smarter-device-manager-fips, portieris-fips, skaffold, cert-exporter-fips, step, kyverno-fips, grafana-mimir, crossplane-provider-gcp, spark-operator-fips, step-issuer-fips, flux-image-reflector-controller, step-ca, sriov-network-device-plugin...