PT-2026-43418

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 Description A logic issue involving insufficient validation may allow a malicious application to access sensitive user data...

CVE-2025-43284

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to cause unexpected system termination...

CVE-2025-43255

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Sequoia 15.6, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

Linux Distros Unpatched Vulnerability : CVE-2018-4212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected...

Linux Distros Unpatched Vulnerability : CVE-2021-30851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing...

CVE-2025-43300

A critical out-of-bounds write vulnerability exists in Apple's ImageIO framework, specifically within the JPEG Lossless decompression code in RawCamera.bundle . The flaw is triggered by a metadata/stream inconsistency in DNG (Digital Negative) files: the SamplesPerPixel tag in TIFF headers disagr...

CVE-2025-43201

This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials...

CVE-2025-43201

This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials...

CVE-2025-43201

This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials...

CVE-2025-43201

This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials...

CVE-2025-43201

This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials...

CVE-2025-43201

The Apple Music Classical application for Android (version 9.0 and later) is affected by a vulnerability where an app may unexpectedly leak a user's credentials . This issue was addressed by Apple through improved checks . The vulnerability is fixed in Apple Music Classical version 2.3 for Androi...

Malicious code in @lbnqduy/improved-chainsaw (npm)

The package @lbnqduy/improved-chainsaw was found to contain malicious code...

Malicious code in @scdb/improved-tribble (npm)

The package @scdb/improved-tribble was found to contain malicious code...

MAL-2025-9279 Malicious code in @scdb/improved-tribble (npm)

The package @scdb/improved-tribble was found to contain malicious code...

MAL-2025-8332 Malicious code in @lbnqduy/improved-chainsaw (npm)

The package @lbnqduy/improved-chainsaw was found to contain malicious code...

SUSE CVE-2025-43228

The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing...

CVE-2025-43196

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges...