CVE-2025-31240

CVE-2025-31240 affects macOS when mounting a maliciously crafted AFP share, which can terminate the system. Fixed in macOS Sequoia 15.5, Sonoma 14.7.6, and Ventura 13.7.6 via improved checks. CVSS 3.1: Network attack, high impact on availability; no confidentiality/integrity impact per the entry....

PT-2025-20792 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: A logic issue was addressed with improved checks, which may have allowed an app to access sensitive user data. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15.5 to resolve the...

PT-2025-20793 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: An information disclosure issue was addressed with improved privacy controls. This issue may allow an app to access sensitive user data. Recommendations: For versions prior to 15.5, update to macOS...

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

Guest post by Dillon Franke, Senior Security Engineer, 20% time on Project Zero Every second, highly-privileged MacOS system daemons accept and process hundreds of IPC messages. In some cases, these message handlers accept data from sandboxed or unprivileged processes. In this blog post, I’ll...

Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape

In April 2024, Microsoft uncovered a vulnerability in macOS that could allow specially crafted codes to escape the App Sandbox and run unrestricted on the system. An attacker could create an exploit to escape the App Sandbox without user interaction required for any sandboxed app using...

Mozilla Firefox < 138.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 138.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-28 advisory. - Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some o...

libxml2 < 2.13.8 / 2.14.x < 2.14.2 Multiple Vulnerabilities (macOS)

The version of libxml2 installed on the remote host is affected by multiple vulnerabilities. - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and...

Security Updates for Microsoft Office Products (April 2025) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the april-15-2025 advisory. - Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network. CVE-2025-2981...

Mozilla Firefox < 137.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 137.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-25 advisory. - A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentiall...

CVE-2023-41076

An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code...

Adobe Bridge 14.x < 14.1.6 / 15.x < 15.0.3 Vulnerability (APSB25-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.6 or 15.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb25-25 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27193 Note...

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...

Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICC...

Google Chrome < 135.0.7049.41 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 135.0.7049.41. It is, therefore, affected by multiple vulnerabilities as referenced in the 202504stable-channel-update-for-desktop advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...

CVE-2025-30444

A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciously crafted SMB network share may lead to system termination...

CVE-2025-24250

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-24279

CVE-2025-24279 affects macOS where the issue was addressed by improved file handling. The vulnerability is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The advisory notes that an app may be able to access contacts as a consequence of this issue. The available metric...

CVE-2025-24246

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data...

CVE-2025-24164

CVE-2025-24164 concerns a logic issue in macOS that could allow an app to modify protected parts of the file system. The vulnerability is addressed by fixes in macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The public descriptions indicate a corrected checkset that prevents unaut...

PT-2025-23207 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A permissions issue was addressed with additional sandbox restrictions, which may have allowed an app to access protected user data...