ROS-20251216-7336

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an access control flaw. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information...

ROS-20251216-7365

A vulnerability in the Ozone component of Google Chrome and Microsoft Edge browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...

The vulnerability of the IntraService customer interaction system, related to bypassing authentication by using a user-controlled key, allows attackers to influence the integrity of protected information.

The vulnerability of the IntraService customer interaction system relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...

ROS-20251215-7314

A vulnerability in the Yelp help system is related to the inclusion of functions from an invalid controlled scope when processing documents using the ghelp schema. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information and execute...

CVE-2025-46289

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

CVE-2025-46289

A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

CVE-2025-46289

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data...

CVE-2025-43416

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

CVE-2025-43351

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43381

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data...

CVE-2025-43416

A logic issue in sudo allows an app to access protected user data . This vulnerability was addressed with improved restrictions. The flaw is fixed in macOS Sequoia 15.7.3 , macOS Sonoma 14.8.3 , and macOS Tahoe 26.2 . Remediation is available via these updated releases.

CVE-2025-43416

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

CVE-2025-43461

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43461

The Apple macOS Tahoe operating system is vulnerable to a Symbolic Link Validation Insufficiency vulnerability (CWE-59). This flaw allows an attacker to exploit improper link resolution to cause an application to access protected user data . The issue was addressed by improving symlink validation...

CVE-2025-46289

A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

EUVD-2025-203158

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access protected user data...

CVE-2025-43351

CVE-2025-43351 concerns a permissions issue in macOS Tahoe that could allow an app to access protected user data in a local environment. The vulnerability stems from insufficient restrictions in privilege checking logic, and Apple fixed it in macOS Tahoe 26.1 (security content notes list Admin Fr...

PT-2025-51027

CVE-2025-46289 A logic issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access protected user… https://t.co/YaHcNplyBP...

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a Symbolic Link Validation Insufficiency vulnerability that can be exploited by an attacke...

PT-2025-50991

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.3 macOS versions prior to Sequoia 15.7.3 Description An issue involving logic restrictions allowed an application to potentially access protected user data. Recommendations Update to macOS Sonoma version...