Apple macOS CoreText Font Glyph Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of font...

Apple macOS USD importNodeAnimations Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

Apple macOS USD importMeshes Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2021-22926)

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the CURLOPTSSLCERT option --cert with the command line tool.When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certificat...

About the security content of Compressor 4.11.1

About the security content of Compressor 4.11.1 This document describes the security content of Compressor 4.11.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICC...

PT-2025-46528

Name of the Vulnerable Software and Affected Versions Lite XL versions prior to 2.1.9 Description Lite XL automatically executes the .lite project.lua file when opening a project directory without user confirmation. This file is designed for project configuration but can contain executable Lua...

Mozilla Firefox ESR < 115.30

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.30. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-89 advisory. - Use-after-free in the Audio/Video component. This vulnerability affects Firefox 145, Firefox ESR 140.5,...

Adobe InDesign < 20.5.1 / 20.0 < 21.0.0 Multiple Arbitrary code execution (APSB25-106) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 20.5.1, 21.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-106 advisory. - InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow...

PT-2025-46529

Name of the Vulnerable Software and Affected Versions Lite XL versions 2.1.8 and prior Description Lite XL is a lightweight, cross-platform text editor written in Lua and C, designed for extensibility via plugins and project-specific modules. The application executes project-level Lua modules and...

Mozilla Firefox < 145.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 145.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-87 advisory. - Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25040)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25040 advisory. - External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduc...

Adobe Photoshop 26.x < 26.9 Vulnerability (macOS APSB25-108)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-108 advisory. - Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

APSB25-108 : Security update available for Adobe Photoshop

No description provided...

EUVD-2025-48941

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to MacOS and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileg...

CVE-2025-43079

CVE-2025-43079 concerns Qualys Cloud Agent where the bundled uninstall script qagent_uninstall.sh (Mac/Linux) executes multiple system commands without absolute paths and without sanitizing $PATH. The root cause is reliance on manipulated PATH, enabling a privileged user (root/sudo) with elevated...

Apple macOS Sequoia Permission Issues Vulnerability

Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia suffers from a privilege issue vulnerability that can be exploited by an attacker to cause a malicious app to gain root privileges...

PT-2025-46178

Name of the Vulnerable Software and Affected Versions Qualys Cloud Agent affected versions not specified Description The Qualys Cloud Agent includes an uninstall script qagent uninstall.sh for MacOS and Linux that invokes system commands without specifying absolute paths or sanitizing the $PATH...

Apple macOS Sequoia Privilege Restriction Insufficiency Vulnerability

Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia suffers from an insufficient privilege restriction vulnerability that can be exploited by an attacker to cause the disclosure of sensitive user data...

Apple macOS Sequoia Permission Issue Vulnerability (CNVD-2025-29330)

Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia has a privilege issue vulnerability that can be exploited by attackers to cause an application to access sensitive user data...