EUVD-2020-30742

Malware in sbrugna...

EUVD-2021-17785

Malware in sbrugna...

EUVD-2022-35930

Malicious code in bioql PyPI...

EUVD-2024-38657

Malicious code in bioql PyPI...

EUVD-2024-52638

Malicious code in bioql PyPI...

CVE-2025-43245

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

CVE-2025-43206

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

CVE-2025-4412 TCC Bypass via Dylib Loading in Viscosity.app

On macOS systems, by utilizing a Launch Agent and loading the viscosityopenvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC Transparency, Consent, and Control identity. The acquired resource access is limited without entitlements such as acces...

CVE-2025-24274

CVE-2025-24274 involves an input validation issue in macOS components remediated by removing vulnerable code. The vulnerability is fixed in macOS updates: Ventura 13.7.6, Sequoia 15.5, and Sonoma 14.7.6. According to the sources, a malicious application could potentially gain root privileges as a...

CVE-2024-54537

CVE-2024-54537 affects macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. In QuickTime Player, an app may read and write files outside its sandbox due to insufficient entitlement checks. The issue was addressed with additional entitlement checks; fixed in the listed OS versions.

CVE-2023-32360

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...

CVE-2022-32894

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively...