2319 matches found
PT-2025-44849
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An attacker with physical access may be able to access contacts from the lock screen. The issue was addressed by restricting options offered on a locked...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from mishandling of a competitive condition that could result in a...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from insufficient privilege limitations and could result in...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from an insufficient permission restriction that could cause an...
Apple多款产品 安全漏洞
Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple macOS is a specialized operating system developed for Mac computers. apple iPadOS is an operating system for the iPad tablet. A security vulnerability exists in several Apple...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from an application that may access sensitive user data...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from an under-restricted lock device option that could...
PT-2025-44895
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A validation issue existed due to insufficient input sanitization, potentially allowing an application to gain root privileges. Recommendations Update to...
PT-2025-50988
Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description A permissions issue existed that could allow an application to access sensitive user data. This issue was addressed through additional sandbox restrictions. Recommendations Update to macOS version 26.1...
PT-2025-44906
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 visionOS versions prior to 26.1 Description An authorization issue exists due to improved state management...
Mozilla Firefox Security Update (mfsa_2025-81) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Fortinet FortiClientMAC Resource Management Error Vulnerability
Fortinet FortiClientMAC is a U.S. fly tower Fortinet company based on macOS platform security tools. Fortinet FortiClientMAC has a resource management error vulnerability that stems from improper allocation of critical resource permissions, which can be exploited by an attacker to cause a local...
CVE-2025-53950
Fortinet FortiDLP Agent’s Outlookproxy plugin for macOS and Windows is affected by CVE-2025-53950. The vulnerability allows an authenticated administrator to collect the current user’s email information across listed FortiDLP Agent versions (MacOS and Windows builds including 11.5.1, 11.4.2–11.4....
CVE-2025-54658
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1 through 11.1.2 and 11.0.1 and 10.5.1 and...
Microsoft Office Multiple Vulnerabilities (Oct 2025) - Mac OS X
This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update October 2025 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Google Chrome Security Update (stable-channel-update-for-desktop_14-2025-10) - Mac OS X
Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...
Google Chrome < 141.0.7390.107 Vulnerability
The version of Google Chrome installed on the remote macOS host is prior to 141.0.7390.107. It is, therefore, affected by a vulnerability as referenced in the 202510stable-channel-update-for-desktop14 advisory. - Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a...
Google Chrome Security Update (stable-channel-update-for-desktop-2025-10) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2025-11462
CVE-2025-11462 affects AWS VPN Client for macOS, versions 1.3.2–5.2.0. Improper validation of the log destination directory during log rotation allows a local user to create a symlink from a client log file to a privileged location, enabling code execution with root privileges if crafted API call...
