28058 matches found
CVE-2025-43314
A parsing issue in directory path handling exists in macOS, allowing an application to access sensitive user data due to insufficient path validation. This vulnerability is addressed in macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . Remediation involves updating to these specific v...
CVE-2025-43343
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-31271
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...
CVE-2025-43231
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data...
CVE-2025-43303
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-43354
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-43354
A logging issue in multiple Apple operating systems, including iOS 26 , iPadOS 26 , macOS Tahoe 26 , tvOS 26 , visionOS 26 , and watchOS 26 , could allow an application to access sensitive user data . This vulnerability stems from a lack of sufficient data redaction during logging processes. The ...
CVE-2025-43354
A logging issue was addressed with improved data redaction. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data...
CVE-2025-43293
The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43341
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges...
CVE-2025-31269
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43287
The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously crafted image may corrupt process memory...
CVE-2025-43356
The webkitgtk component in various Linux distributions and Apple products is vulnerable to a security issue where a website can access sensor information without user consent due to improper cache handling . This issue is fixed in Safari 26 , iOS 18.7 , iPadOS 18.7 , iOS 26 , iPadOS 26 , macOS Ta...
CVE-2025-43203
The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...
CVE-2025-43366
Apple's macOS Tahoe (version 26) is affected by an out-of-bounds read vulnerability caused by insufficient boundary checking. This flaw could allow an application to disclose coprocessor memory . The issue has been addressed with improved bounds checking, and the fix is available in macOS Tahoe 2...
CVE-2025-6947 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox...
CVE-2025-6947
CVE-2025-6947 affects WatchGuard Fireware OS running on Firebox. The issue is a Stored Cross-Site Scripting (XSS) vulnerability in the SIP Proxy module caused by improper input neutralization during web page generation. Exploitation requires an authenticated administrator session to a locally man...
nettoolbox
NetToolbox - Network Security Toolkit A comprehensive, modern...
CVE-2025-10440 D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection
A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub4621DC of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument hname leads to os comma...