Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a Symbolic Link Validation Insufficiency vulnerability that can be exploited by an attacke...

PT-2025-51027

CVE-2025-46289 A logic issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access protected user… https://t.co/YaHcNplyBP...

PT-2025-50991

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.3 macOS versions prior to Sequoia 15.7.3 Description An issue involving logic restrictions allowed an application to potentially access protected user data. Recommendations Update to macOS Sonoma version...

The vulnerability of the user import function in Nagios Log Server, a monitoring and analysis software, allows a hacker to disclose protected information.

The vulnerability of the user import function in the Nagios Log Server monitoring and analysis software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of iOS and iPadOS operating systems, related to incorrect default permissions, allows attackers to gain access to protected information.

The vulnerability of iOS and iPadOS operating systems is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to access protected information by circumventing screen lock security restrictions...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to disclose protected information

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

The vulnerability of the sunrpc component in the Linux operating system’s kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the sunrpc component in the Linux operating system’s kernel relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the f2fs component of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the drivers/iommu/amd/init.c component of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability in the drivers/iommu/amd/init.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the do_register_framebuffer() function in the fbdev/core/fbmem.c file of the Linux kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the doregisterframebuffer function in the fbdev/core/fbmem.c file of the Linux kernel relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the handle_misaligned_load() function in the arch/riscv/kernel/traps_misaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system allows a attacker to access protected information.

The vulnerability of the handlemisalignedload function in the arch/riscv/kernel/trapsmisaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the spi component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the spi component in the Linux operating system’s kernel involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the rseq.c component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the rseq.c component in the Linux operating system’s kernel is related to its dependence on unreliable input data during security decision-making. Exploiting this vulnerability allows attackers to compromise the confidentiality and accessibility of protected information...

The vulnerability of the Notepad module in the HarmonyOS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Notepad module in the HarmonyOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JetBrains Hub account management software, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the JetBrains Hub account management software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s microchip, allows attackers to enhance their privileges and expose protected information.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the implementation of the Web Map Service (WMS) protocol in the software for managing and publishing geospatial data on the OSGeo GeoServer server allows a perpetrator to disclose protected information and cause service failures.

The vulnerability of the Web Map Service WMS protocol implementation in the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to disclose protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the SSH-server for the Go programming language library allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the SSH-server for the Go programming language library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...