CVE-2025-24197

CVE-2025-24197 describes a logic issue that could allow an app to access sensitive user data. Affected products are macOS Sonoma 14.8 and macOS Sequoia 15.7; the issue is resolved by these updates. The description confirms a fix with improved checks; no exploit details are provided in the sources.

CVE-2022-50270 f2fs: fix the assign logic of iocb

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b "f2fs: show more DIO information in tracepoint" introduces iocb field in 'f2fsdirectIOenter' trace event And it only assigns the pointer and later it accesses its field in...

CVE-2022-50266 kprobes: Fix check for probe enabled in kill_kprobe()

In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix check for probe enabled in killkprobe In killkprobe, the check whether disarmkprobeftrace needs to be called always fails. This is because before that we set the KPROBEFLAGGONE flag for kprobe so that...

PT-2026-43420

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 Description A logic issue exists where a malicious application may be able to gain root privileges, which are the highest level of...

PT-2025-37792

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.8 Description: A logic issue allowed an application to potentially access user-sensitive data. This issue was resolved with improved checks. Recommendations: Update to macOS version 14.8...

PT-2025-37779

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A logic issue existed due to insufficient checks, potentially allowing an application to access sensitive user data...

PT-2026-43418

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 Description A logic issue involving insufficient validation may allow a malicious application to access sensitive user data...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS, which stems from a logic issue that could result in applications accessing sensitive user data. The following versions are...

Apple macOS Sonoma 安全漏洞

Apple macOS Sonoma is an operating system launched on June 5, 2023 by Apple. Apple macOS Sonoma has a logic problem vulnerability that can be exploited by an attacker to cause an application to access sensitive user data...

PT-2025-44825

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 tvOS versions prior to 26 watchOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 visionOS versions prior to 26 Description A logic issue exists due to improved state management. A remote...

Security update for curl

This update for curl fixes the following issues: CVE-2025-9086: bug in path comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server bsc1249348. Patch...

PT-2025-88: Cross‑site scripting and open redirect in Fastwel PLC web interface

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability stems from the lack of user input filtering in the redirect parameter. Exploitation of the vulnerability allows a remote attacker to execute arbitrary...

PT-2025-86: Disclosure of confidential data via controller configuration request in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to obtain administrator‑level privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...

PT-2025-85: Insufficient access control in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...

Google Android Information Disclosure Vulnerability (CNVD-2025-24499)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a letter disclosure vulnerability, which is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to potentially cause a local information leak...

Google Android elevation of privilege vulnerability (CNVD-2025-28658)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by an unauthorized way of adding contacts due to a logic error in the onCreate function in SelectAccountActivity.java. An attacker can...

Google Android elevation of privilege vulnerability (CNVD-2025-26882)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a logic error in the VerifyNoToverlapInSessions function in apexd.cpp that results in the blocking of security updates via mainline installation...

Google Android Logic Error Vulnerability

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a logic error vulnerability that can be exploited by...

Google Android elevation of privilege vulnerability (CNVD-2025-24497)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a logic error in the handlePackagesChanged function in DevicePolicyManagerService.java. An attacker can exploit the vulnerability to gain elevate...

Google Android elevation of privilege vulnerability (CNVD-2026-10644)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the Pixel Sim Lock component. An attacker can exploit the vulnerability to elevate privileges...