Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from an application that may bypass certain privacy preferences. The following products and versions are affected:...

CVE-2025-43232

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to bypass certain Privacy preferences...

CVE-2025-43232

CVE-2025-43232 describes a permissions issue in macOS where an app may bypass certain Privacy preferences. The entry lists a high-severity impact (C/H/I/A) with CVSS 3.1 base score 9.8 and indicates the vulnerability is associated with network attack vector, no privileges required, and no user in...

CVE-2025-43232

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to bypass certain Privacy preferences...

thunderbird security update

128.13.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.13.0 - Add OpenELA debranding 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build1...

Oracle Linux 8 : firefox (ELSA-2025-11747)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-11747 advisory. 128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA defaul...

firefox security update

128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.13.0-1 - Update to 128.13.0 build1...

firefox security update

128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.13.0-1 - Update to 128.13.0 build1...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business processes, allowing attackers to gain access to read, modify, and delete information.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to information...

CVE-2025-30739

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle CRM Technica...

thunderbird security update

128.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.12.0 - Add OpenELA debranding 128.12.0-1 - Update to 128.12.0 build1...

thunderbird security update

128.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.12.0 - Add OpenELA debranding 128.12.0-1 - Update to 128.12.0 build1...

Oracle Linux 8 : firefox (ELSA-2025-10074)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-10074 advisory. 128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA defaul...

Oracle Linux 10 : firefox (ELSA-2025-10073)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-10073 advisory. 128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA defau...

firefox security update

128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.12.0-1 - Update to 128.12.0 build1...

firefox security update

128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.12.0-1 - Update to 128.12.0 build1...

What LLMs Know About Their Users

Simon Willison talks about ChatGPT's new memory dossier feature. In his explanation, he illustrates how much the LLM--and the company--knows about its users. It's a big quote, but I want you to read it all. Here's a prompt you can use to give you a solid idea of what's in that summary. I first sa...

CVE-2024-7457

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...

CVE-2024-7457

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...

CVE-2024-7457 macOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...