PT-2025-13921 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A downgrade issue was addressed with additional code-signing restrictions. This issue allows an app to potentially access protected user data. Recommendations: For versions prior to 15.4, update to...

PT-2025-13810 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.1 Description: An Out-of-Band Server-Side Request Forgery OOB SSRF issue was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. This...

PT-2025-23208 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue was addressed with improved memory handling. An app may be able to corrupt coprocessor memory. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the issue...

PT-2025-23003

Name of the Vulnerable Software and Affected Versions GNU Binutils versions up to 2.44 Description A critical vulnerability has been found in GNU Binutils, affecting the debug type samep function of the objdump component. This issue leads to memory corruption and requires local access to exploit...

PT-2025-13788

Name of the Vulnerable Software and Affected Versions PyTorch version 2.6.0 Description A critical issue was found in the torch.lstm cell function, leading to memory corruption. The attack requires local access. Recommendations For PyTorch version 2.6.0, as a temporary workaround, consider...

PT-2025-13963

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.4 visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 and prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description A use-after-free issue was...

PT-2025-13947

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.4 Description The issue was addressed with improved memory handling. An app may be able to cause unexpected system termination. Recommendations For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the...

PT-2025-13954 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 macOS versions prior to 14.7.5 Description: An access issue was addressed with additional sandbox restrictions. This issue allows an app to potentially access user-sensitive data. Recommendations: For macOS versio...

PT-2025-20755 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows an app to potentially break out of its sandbox. This was addressed by adding additional logic. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the...

PT-2025-14017

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions 2.0.0 through 2.39.0 Description A vulnerability exists in Apache ActiveMQ Artemis where a user with the createDurableQueue or createNonDurableQueue permission on an address can update the routing-type supporte...

PT-2025-23206 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to read sensitive location information. Recommendations: For versions prior to 15.4, update to macOS Sequoia...

PT-2025-13859 · Drupal · Drupal Profile Private

Name of the Vulnerable Software and Affected Versions: Drupal Profile Private version . Description: The issue affects the private profile functionality. Recommendations: For version ., consider updating to a newer version that addresses this issue, if available. At the moment, there is no...

PT-2025-13816 · Gifplayer · Gifplayer

Name of the Vulnerable Software and Affected Versions: gifplayer versions prior to 0.3.7 Description: The issue is a cross-site scripting XSS vulnerability. All versions under 0.3.7 are impacted. Recommendations: For versions prior to 0.3.7, please upgrade to 0.3.7 to resolve the issue...

PT-2025-13873 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A buffer overflow issue was addressed with improved memory handling. This issue may allow an app to cause unexpected system termination or...

PT-2025-13936 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: The issue allows an app to potentially disclose kernel memory due to inadequate bounds checks. Recommendations: For macOS...

PT-2025-13774 · Pytorch +1 · Pytorch +1

Name of the Vulnerable Software and Affected Versions: PyTorch version 2.6.0 Description: A critical issue has been identified, affecting the torch.nn.utils.rnn.pad packed sequence function, which can lead to memory corruption. This issue requires local access to exploit. Recommendations: For...

PT-2025-13800

Name of the Vulnerable Software and Affected Versions Beego versions prior to 2.3.6 Description Beego is an open-source web framework for the Go programming language. A Cross-Site Scripting XSS vulnerability exists in the RenderForm function due to improper HTML escaping of user-controlled data...

Ingress-Nginx Admission Controller RCE Escalation

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

PT-2025-13942 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A privacy issue was addressed by moving sensitive data to a protected location. An app may be able to observe unprotected user data. Recommendations: For versions prior to 15.4, update to macOS Sequoi...

PT-2025-15076

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 25.04.0 Description The issue allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function due to a misplaced isOk check. This occurs in the JBIG2 parsing component of the software...