Apple macOS 后置链接漏洞

Apple macOS is a proprietary operating system from Apple Inc. that was developed specifically for Mac computers. A backlink vulnerability exists in Apple macOS version 15.3, which originates from a malicious application that may be able to create symbolic links pointing to a protected area of the...

PT-2025-5317

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.3 Safari versions prior to 18.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description A privacy issue was addressed with improved handling of files. Copying a URL from Web Inspector may lead to...

The vulnerability of the Gatekeeper component of the macOS operating system, related to access control errors, allows a perpetrator to influence the integrity of data.

The vulnerability of the Gatekeeper component in the macOS operating system is related to access control errors. Exploiting this vulnerability could allow a perpetrator to influence the integrity of data...

The vulnerability of MacOS operating systems, related to state management errors, allows a perpetrator to trigger a service failure.

The vulnerability of MacOS operating systems is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Launch Services interface for macOS operating systems allows attackers to bypass the sandbox protection mechanism.

The vulnerability of the Launch Services interface for MacOS systems is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to bypass the sandbox’s security mechanisms...

PT-2025-5300 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 tvOS...

PT-2025-5313

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.3 macOS Sequoia versions prior to 15.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 visionOS versions prior to 2.3 Description The issue is related to a lack of authorization procedure in the WebKit...

CVE-2024-40854

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination...

The vulnerability in the full-screen mode of browsers like Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Mac OS allows a hacker to trigger a service failure.

The vulnerability in the full-screen mode of browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Mac OS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruptions remote...

SUSE CVE-2024-54502

The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-43106

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of...

CVE-2024-41145

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams work or school 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the...

Vulnerabilities fixed in macOS

Apple has fixed vulnerabilities in macOS Sequoia 15.2, Ventura 13.7.2, and Sonoma 14.7.2. The vulnerabilities include a use-after-free vulnerability that could lead to unexpected application termination or arbitrary code execution, and logic issues that allowed applications to modify protected...

CVE-2024-54491

The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. A malicious application may be able to determine a user's current location...

PT-2025-3039 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to a memory reading problem beyond the allowed range in the...

PT-2024-36357 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: A malicious application may be able to determine a user's current location. The issue was resolved by sanitizing logging. Recommendations: For versions prior to 15.2, update to macOS Sequoia 15.2 to...

PT-2024-36346 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved checks. An app may be able to access user-sensitive data. Recommendations: For macOS versions prior ...

PT-2025-3030 · Apple · Visionos +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7.2 macOS versions prior to 15.2 iPadOS versions prior to 17.7.4 iPadOS versions prior to 18.2 iOS versions prior to 18.2 tvOS versions prior to 18.2 watchOS versions prior to 11.2 visionOS versions prior to 2.2...

PT-2024-36354

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.2 macOS versions prior to Ventura 13.7.2 macOS versions prior to Sonoma 14.7.2 Description: A path handling issue was addressed with improved validation. Running a mount command may unexpectedly execute...

The vulnerability of the Shortcuts component in operating systems such as iOS, iPadOS, watchOS, and macOS allows a malicious individual to gain unauthorized access to confidential data.

The vulnerability of the Shortcuts component in iOS, iPadOS, watchOS, and macOS is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...