PT-2025-13874 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A logic issue was addressed with improved checks, allowing an app to potentially modify protected parts of the file system. Recommendation...

PT-2025-14002 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: An issue exists where an app may be able to modify protected parts of the file system. This issue was addressed by removing the vulnerable...

PT-2025-20754 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.6 macOS versions prior to 14.7.6 macOS versions prior to 15.4 Description: The issue allows a malicious app to potentially gain root privileges. This was addressed with additional permissions checks...

Apple macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS that stems from privacy concerns and could cause applications to observe unprotected user data...

PT-2025-13992 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue may allow an app to cause unexpected...

PT-2025-23208 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue was addressed with improved memory handling. An app may be able to corrupt coprocessor memory. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the issue...

PT-2025-20755 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows an app to potentially break out of its sandbox. This was addressed by adding additional logic. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the...

PT-2025-12971 · Unknown · Fast Cad Reader

Name of the Vulnerable Software and Affected Versions: Fast CAD Reader versions prior to a fixed version no specific fixed version mentioned, affected versions not specified Description: The Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions rwxrwxrwx,...

Mattermost Desktop < 5.11.0 (macOS) (MMSA-2024-00403)

The version of Mattermost Desktop installed on the remote host is prior to 5.11.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00403 advisory: - Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker wit...

Apple macOS MOV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MOV...

Apple macOS MOV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MOV...

Apple macOS WindowServer Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2025-29903

In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible...

CVE-2025-29903

CVE-2025-29903 affects JetBrains Runtime (JBR) before 21.0.6b872.80, where insecure macOS flags enable arbitrary dynamic library execution. The provided sources confirm the vulnerability in JBR and do not specify concrete exploit vectors beyond the insecure flags issue, nor present a confirmed re...

Apple macOS Resource Management Error Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from memory handling improvements, and can be exploited by an attacker to cause an unexpected system termination or kernel memory corruption...

Apple macOS Sequoia Information Disclosure Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from an improvement in the editing of sensitive information, and can be exploited by an attacker to access sensitive user data...

The vulnerability of the TCC component in operating systems for macOS, iOS, and iPadOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TCC component in macOS, iOS, and iPadOS is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information...

Apple macOS 信息泄露漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS that stems from a privilege improvement that could cause an application to access removable volumes without user consent...

CVE-2025-1413

CVE-2025-1413 affects DaVinci Resolve on macOS prior to 19.1.3. The root cause is incorrect file permissions (rwxrwxrwx) for the application, which can enable Dylib hijacking and privilege escalation for guest accounts, other users, and applications. The vulnerability is local, with high impact t...