Linux net/sched sch_fq_pie Heap Buffer Overflow DoS

The vulnerability of the fqpieqdiscenqueue function in the net/sched/schfqpie.c module of the network/sched subsystem in the Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to access protected information or cause service failure...

Linux Kernel KVM Hypercall4 Buffer Overflow DoS

The vulnerability of the kvmhypercall4 function in the arch/x86/include/asm/kvmpara.h module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to access protected informatio...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43379

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43399

A privacy issue in Siri allows an app to access protected user data due to insufficient redaction of sensitive information. This vulnerability affects several Apple platforms and has been addressed in the following versions: iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , and macOS Tahoe 26.1...

CVE-2025-43399

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

PT-2025-50993

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to access protected user data due to insufficient validation of symlinks. Recommendations Update to macOS version 26.1 or later...

PT-2025-44841

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be capable of accessing user data that should be protected. The issue involves improper handling of symlinks. Recommendations Update to...

PT-2025-44840

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be able to access protected user data due to improved handling of symlinks. Recommendations Update to macOS Sonoma version 14.8.2 or...

AVReg Software Unauthenticated Access Disclosure

The vulnerability of the AVReg software for creating audio/video recorders is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Portfolio Room Module Unauthorized Access

The vulnerability of the Portfolio Room module in the cloud corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor, operating...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process during the execution of the “Generate Team Sprints” action. Exploiting this vulnerability could...

Jira Align Authorization Bypass

The vulnerability of the cloud-based corporate solution for planning and managing software and IT projects like Jira Align formerly AgileCraft is related to deficiencies in the authorization process when processing audit logs. Exploiting this vulnerability could allow a malicious actor, operating...

Linux e1000ResetTask Heap Buffer Overflow DoS

The vulnerability of the e1000ResetTask function in the Linux operating system is related to latency issues. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to insufficient access control measures. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...