Adobe Dimension < 4.1.2 Multiple Arbitrary code execution (APSB25-45) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-45 advisory. - Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in...

Adobe Bridge 14.x < 14.1.7 / 15.x < 15.0.4 Multiple Vulnerabilities (APSB25-44)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.7 or 15.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-44 advisory. - Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound...

Adobe InDesign < 19.5.3 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-37) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.3, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-37 advisory. - InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerabilit...

macOS 13.x < 13.7.6 Multiple Vulnerabilities (122718)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.7.6. It is, therefore, affected by multiple vulnerabilities: - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML...

PT-2025-20782 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: An information disclosure issue was addressed with improved privacy controls. This issue allows an app to potentially access sensitive user data. Recommendations: For versions prior to 15.5, update to...

macOS 15.x < 15.5 Multiple Vulnerabilities (122716)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.5. It is, therefore, affected by multiple vulnerabilities: - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine...

PT-2025-20791 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: A logic issue was addressed with improved state management, which could allow an attacker to gain access to protect...

macOS 14.x < 14.7.6 Multiple Vulnerabilities (122717)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.6. It is, therefore, affected by multiple vulnerabilities: - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine...

Apple MacOSX Security Update (HT122400)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

macOS 15.x < 15.4.1 Multiple Vulnerabilities (122400)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.4.1. It is, therefore, affected by multiple vulnerabilities: - A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS...

Adobe After Effects < 24.6.5 / 25.0 < 25.2 Multiple Vulnerabilities (APSB25-23) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 24.6.5, 25.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-23 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2025-27182,...

Adobe Animate 23.x < 23.0.11 / 24.x < 24.0.8 Multiple Vulnerabilities (APSB25-31)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.11 or 24.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-31 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-27200 -...

Mozilla Thunderbird ESR < 128.9

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-24 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8...

CVE-2025-24235

CVE-2025-24235 describes a memory initialization issue in macOS that can lead to heap corruption and, in some cases, unexpected app termination. The vulnerability is associated with a local attack vector, requiring low privileges and no user interaction, with a high impact on availability. Apple ...

CVE-2025-24241

The CVE-2025-24241 issue is a configuration-related vulnerability affecting macOS, fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. It describes a way an app may deceive a user into copying sensitive data to the pasteboard. The core detail provided is a configuration is...

PT-2025-13960 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A logging issue was addressed with improved data redaction. Deleting a conversation in Messages may expose user contact...

PT-2025-13971 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows an app to potentially corrupt coprocessor memory due to inadequate bounds checks. The estimated number of potentially affected devices worldwide is not specified. There is no...

PT-2025-13872

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description The issue allows a malicious JAR file to bypass Gatekeeper checks due to improper handling of executable types. Recommendatio...

PT-2025-13984 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 macOS versions prior to 14.7.5 Description: A malicious app may be able to access private information due to inadequate checks. The estimated number of potentially affected devices worldwide is not specified...

PT-2025-13976 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A race condition was addressed with improved locking. Mounting a maliciously crafted SMB network share may lead to system...