CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to a type confusion flaw. An...

Mozilla Firefox ESR < 140.6

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-94 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR...

Adobe Reader < 20.005.30838 / 25.001.20997 Multiple Vulnerabilities (APSB25-119) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30838 or 25.001.20997. It is, therefore, affected by multiple vulnerabilities. - Out-of-bounds Read CWE-125 potentially leading to Arbitrary code execution CVE-2025-64899 - Untrusted Search Path CWE-426...

PT-2025-50215

Name of the Vulnerable Software and Affected Versions Sublime Text versions prior to Build 3209 Description Sublime Text 3 is susceptible to a Dylib Injection issue on MacOS. An attacker can compile a dynamic library .dylib file and execute it within the Sublime Text application’s process. This...

CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to a Dylib Injection flaw due to an uncontrolled search path element . An attacker can compile a .dylib file and force its execution within the application's context, potentially leading to arbitrary code execution . This issue was addres...

CVE-2025-5471: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

Adobe Creative Cloud < 6.8.0.821 Application denial-of-service (APSB25-120) (macOS)

The version of Adobe Creative Cloud installed on the remote macOS host is prior to 6.8.0.821. It is, therefore, affected by a vulnerability as referenced in the APSB25-120 advisory. - Creation of Temporary File in Directory with Incorrect Permissions CWE-379 potentially leading to Application...

Adobe Acrobat < 20.005.30838 / 24.001.30307 / 25.001.20997 Multiple Vulnerabilities (APSB25-119) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30838, 24.001.30307, or 25.001.20997. It is, therefore, affected by multiple vulnerabilities. - Out-of-bounds Read CWE-125 potentially leading to Arbitrary code execution CVE-2025-64899 - Untrusted Search...

Mozilla Firefox ESR < 115.31

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.31. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-93 advisory. - Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox 146, Firef...

CVE-2025-5469: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245...

CVE-2025-5470: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275...

CVE-2025-65741: Uncontrolled Search Path Element

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...

APSB25-118 : Security update available for Adobe DNG SDK

Adobe has released an update for the Adobe DNG Software Development Kit SDK for Windows and macOS. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure, or application denial-of-service...

APSB25-120 : Security update available for Adobe Creative Cloud Desktop

Adobe has released an update for the Creative Cloud Desktop for macOS. This update includes a fix for an important vulnerability that could lead to application denial-of-service in the context of the current user...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js RCE Patcher CVE-2025-55182 A simple, automated tool...

CVE-2025-55076

A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system, which may allow a local user to execute arbitrary commands wi...

CVE-2025-62686

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a RESTRICT segment, a local user may exploit the DYLDINSERTLIBRARIES environment...

CVE-2025-62223 Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability

...

CVE-2025-65842

The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...