CVE-2025-31270

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43285

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43367

A privacy vulnerability exists in macOS Sonoma prior to version 14.8 and macOS Tahoe prior to version 26 . The root cause is the improper location of sensitive data , which could allow an application to access protected user data . To remediate this issue, users should update to macOS Sonoma 14.8...

CVE-2025-43311

The macOS operating system is affected by a vulnerability where an application may be able to access protected user data due to missing entitlement checks . This issue has been addressed with additional entitlement checks. Affected versions include macOS Sequoia prior to 15.7, macOS Sonoma prior ...

PT-2025-37825

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data. The issue was resolved by blocking unsigned services from launchi...

PT-2025-37784

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A permissions issue allowed an app to potentially access protected user data. This issue was addressed with additional restrictions. Recommendations: Update to...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from an application that may access protected user data. The following versions are affected: macOS Sequoia prior ...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from a permissions issue that could cause an application to access protected user data. The following versions are...

PT-2025-37817

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data due to missing entitlement checks. Recommendations: Update to macO...

Apple macOS Sonoma和Apple macOS Tahoe 安全漏洞

Apple macOS Sonoma and Apple macOS Tahoe are operating systems from Apple Inc. A security vulnerability exists in Apple macOS Sonoma prior to version 14.8 and Apple macOS Tahoe prior to version 26, which stems from insufficient privilege limitations and could cause an application to access...

The vulnerability of the Compiler component of the Oracle Java SE software platform and the Oracle GraalVM virtual machine allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Compiler component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of the HashPeImageByType() function in the Tianocore EDK2 library, which allows a hacker to compromise the integrity and accessibility of protected information

The vulnerability of the HashPeImageByType function in the Tianocore EDK2 library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

PT-2025-85: Insufficient access control in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...

The vulnerability of the InterpretImageFilename function in the console-based image editing tool ImageMagick allows a hacker to gain unauthorized access to protected information.

The vulnerability of the InterpretImageFilename function in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

CVE-2023-21483 concerns Samsung Galaxy Store prior to 4.5.53.6 with an improper access control flaw that lets a local attacker access protected data via an exported service. Affected component: Galaxy Store (mobile app). Root cause: improper access control enabling data exposure without remote ex...