The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser allows attackers to execute arbitrary commands.

The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the Accounts component in operating systems such as MacOs, iOS, and iPadOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accounts component in MacOS, iOS, and iPadOS is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Image Handler component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows a hacker to trigger a service failure.

The vulnerability of the Image Handler component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the USB Restricted Mode function in iOS and iPadOS operating systems allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the USB Restricted Mode function in iOS and iPadOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain unauthorized access to devices...

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS, related to writing beyond the memory buffer, allows attackers to damage memory.

The vulnerabilities of the operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS are related to writing beyond the buffer boundaries of memory. Exploiting these vulnerabilities can allow attackers to corrupt memory...

The vulnerability of the Password Autofill component in operating systems such as visionOS, iOS, iPadOS, MacOS, and watchOS allows attackers to read and write arbitrary files.

The vulnerability of the Password Autofill component in the visionOS, iOS, iPadOS, MacOS, and watchOS operating systems is related to the absence of authentication. Exploiting this vulnerability allows attackers to read and write arbitrary files...

Vulnerability of operating systems such as iOS, iPadOS, tvOS, MacOS, watchOS, and visionOS, due to errors in state management, allows attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems such as iOS, iPadOS, tvOS, macOS, watchOS, and visionOS are related to state management errors. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential information...

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS, related to operations beyond the buffer boundaries of memory, allows attackers to damage memory resources.

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to damage memory resources...

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS allows a attacker to execute arbitrary code.

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the CoreMedia component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows attackers to gain increased privileges.

The vulnerability of the CoreMedia component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More

Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been exploited in the wild. The vulnerability, tracked as CVE-2025-24085 CVSS scores: 7.3/7.8, has been described as a use-after-free bug in the Core Med...

DEBIAN-CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an unexpected process crash...

DEBIAN-CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user...

PT-2025-3363 · Tencent · Wesing

Name of the Vulnerable Software and Affected Versions: Tencent Technology Shanghai Co., Ltd WeSing iOS version 9.3.39 Description: An issue in WeSing iOS allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 9.3.39, avoid using links from...

Xuan Ting Qidian Reader 安全漏洞

Xuan Ting Qidian Reader is a reading program from Xuan Ting Entertainment Xuan Ting, a Chinese company. A security vulnerability exists in Xuan Ting Qidian Reader iOS version 5.9.384, which can be exploited by an attacker to access sensitive user information by providing a crafted link...

PT-2025-3368 · Cloud Whale Interactive Technology Llc · Polybuzz

Name of the Vulnerable Software and Affected Versions: Cloud Whale Interactive Technology LLC. PolyBuzz iOS version 2.0.20 Description: The issue allows attackers to access sensitive user information by supplying a crafted link. Recommendations: For Cloud Whale Interactive Technology LLC. PolyBuz...

KuGou Music 安全漏洞

KuGou Music 酷狗音乐 is a music program from the Chinese company KuGou KuGou。 A security vulnerability exists in KuGou Music iOS version v20.0.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

Baidu Lite 安全漏洞

Baidu Lite Baidu Extreme is a Baidu Extreme version from the Chinese company Baidu Baidu. A security vulnerability exists in Baidu Lite iOS version 6.40.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

PT-2025-5333 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: The issue is related to a null pointer dereference in the implementation of AirPlay technology in macOS, iOS, and iPadOS operating systems. Thi...

Bobo UU Game Booster 安全漏洞

Bobo UU Game Booster is a free downloadable game utility program from Bobo China. A security vulnerability exists in Bobo UU Game Booster iOS version 10.6.13, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...