PT-2025-44878

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description A permissions issue existed that allowed an application to potentially fingerprint a user. Additional restrictions were implemented to address this issue. Recommendations...

PT-2025-44836

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An issue existed where an application could potentially access sensitive user data. The problematic code has been removed to address this privacy concern. Recommendations...

PT-2025-44842

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A logic issue existed due to insufficient checks, potentially allowing a sandboxed application to access sensitive user data. Recommendations Update to...

PT-2025-50993

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to access protected user data due to insufficient validation of symlinks. Recommendations Update to macOS version 26.1 or later...

PT-2025-50997

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to obtain elevated privileges, specifically root access. The issue was resolved through enhanced security checks. Recommendations Update to version 26.1 or later...

PT-2025-44866

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description A flaw exists due to improper memory handling when processing specially designed web content. This could result in memory corruption. Recommendations Update to iOS versio...

PT-2025-44892

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 visionOS versions prior to 26.1 Description An application may be able to cause unexpected system termination or corrupt kernel...

PT-2025-50996

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An injection issue existed due to inadequate validation, potentially allowing an application to access sensitive user data. Recommendations Update to macOS version 26.1...

PT-2025-50984

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.1 Description The software addresses an issue with improper handling of symlinks, which could allow a malicious application to delete protected user data. Recommendations Update to macOS Tahoe 26.1...

Critical Photon OS Security Update - PHSA-2025-5.0-0666

Updates of 'netkit-telnet', 'libsoup', 'glibc' packages of Photon OS have been released...

PT-2025-44852

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A flaw exists where an application could potentially escape its sandbox. The issue was addressed through the implementation of additional checks...

EUVD-2025-37433

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system...

CVE-2025-36367

IBM i versions 7.2–7.6 are affected by CVE-2025-36367 due to an invalid IBM i SQL services authorization check, allowing a malicious actor to escalate privileges to root on the host OS. Affected products/versions: IBM i 7.6, 7.5, 7.4, 7.3, 7.2. Underlying cause: missing authorization check in IBM...

CVE-2025-54763

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command...

Photon OS 4.0: Openssl PHSA-2025-4.0-0895

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0895. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openjdk21 PHSA-2025-4.0-0896

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0896. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Binutils PHSA-2025-5.0-0663

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0663. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-64348

ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow...

CVE-2025-64348 ELOG configuration file authorization bypass

ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow...

CVE-2025-46423

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...