CVE-2025-24122

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system...

CVE-2025-24115

A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to read files outside of its sandbox...

CVE-2025-24093

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3. An app may be able to access removable volumes without user consent...

CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs...

CVE-2024-54522

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory...

CVE-2024-54488

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2025-24122

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system...

CVE-2025-24122

CVE-2025-24122 concerns a downgrade issue on Intel-based Macs that was addressed by additional code-signing restrictions. It is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3 and macOS Sequoia 15.3. The issue could allow an app to modify protected parts of the file system due to the downgrade...

CVE-2025-24122

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system...

PT-2025-5284 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.3 tvOS versions prior to 18.3 watchOS versions prior to 11.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: A permissions issue was addressed with additional restrictions. A malicious...

PT-2025-5278 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description: A logic issue was addressed with improved restrictions, which may allow an app to access information about a user's contacts. The issue is...

VLC Media Player Multiple Vulnerabilities (Jan 2025) - Mac OS X

VLC Media Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...

Tenda A15 Router Code Execution

The vulnerability of the formSetDevNetName function implemented in the goform/SetDevNetNam microprogramming environment for Tenda A15 routers is related to the issue where the operation’s output goes beyond the buffer boundaries in memory when processing the mac parameter. Exploiting this...

PT-2025-5317

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.3 Safari versions prior to 18.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description A privacy issue was addressed with improved handling of files. Copying a URL from Web Inspector may lead to...

Gatekeeper Access Control Data Compromise

The vulnerability of the Gatekeeper component in the macOS operating system is related to access control errors. Exploiting this vulnerability could allow a perpetrator to influence the integrity of data...

MacOS State Management DoS

The vulnerability of MacOS operating systems is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-5279 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 Description: The issue is related to the insecure storage of confidential information in the Messages component of the MacOs operating system. Exploitation of this issue may allow an attacker to gain unauthorized...

PT-2025-5333 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: The issue is related to a null pointer dereference in the implementation of AirPlay technology in macOS, iOS, and iPadOS operating systems. Thi...

PT-2025-5329 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS...

PT-2025-5271 · Apple · Macos Sonoma +8

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS...