CVE-2025-24247

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker may be able to cause unexpected app termination...

CVE-2025-24247

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker may be able to cause unexpected app termination...

CVE-2025-24276

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information...

CVE-2025-30429

A path handling issue exists in several Apple operating systems, allowing an application to potentially break out of its sandbox . The vulnerability is addressed through improved validation. Affected versions include iOS 18.4 , iPadOS 18.4 , iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sonoma 14.7....

CVE-2025-30469

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen...

CVE-2025-24216

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-31192

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent...

CVE-2025-30432

A logic issue involving poor state management affects multiple Apple products, including iOS 18.4 , iPadOS 18.4 , iPadOS 17.7.6 , macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , tvOS 18.4 , visionOS 2.4 , and watchOS 11.4 . A malicious application could exploit this flaw to attempt passcode entries ...

CVE-2025-24164

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system...

CVE-2025-30449

A permissions issue in macOS allows an application to potentially gain root privileges . This vulnerability has been addressed with additional restrictions in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . Proof-of-concept exploitation has been reported in the wild. No spec...

CVE-2025-30368 Zulip allows the deletion of organization by administrators of a different organization

Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any organization wa...

CVE-2025-30155 Tuleap does not enforce read permissions on parent trackers in the REST API

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 and Tuleap Enterprise Edition 16.5-5 and 16.4-8...

CVE-2025-30209

This CVE (CVE-2025-30209) concerns Tuleap, where an improper permission check allows an attacker to access release notes content or related information via the FRS REST endpoints. The vulnerability stems from access control weaknesses in the Tuleap software suite, specifically affecting the REST ...

CVE-2025-30209 Tuleap has improper permission handling in the REST endpoints and release notes display of the FRS plugin

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...

CVE-2025-29766 Tuleap has missing CSRF protections on artifact submission & edition from the tracker view

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up...

CVE-2025-29766

Tuleap CSRF vulnerability (CVE-2025-29766): Missing CSRF protections on artifact submission and edition from the tracker view could allow an attacker to trick users into submitting or editing artifacts or follow-up comments. Affected versions: Tuleap Community Edition prior to 16.5.99.1741784483;...

Important: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

python-jinja2 security update

2.11.3-8 - Security fix for CVE-2025-27516 Resolves: RHEL-85064...

PT-2025-13882 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 tvOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: An out-of-bounds read issue was addressed with improved input validation...

Oracle Linux 9 : python-jinja2 (ELSA-2025-3406)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-3406 advisory. 2.11.3-8 - Security fix for CVE-2025-27516 Resolves: RHEL-85064 Tenable has extracted the preceding description block directly from the Oracle Linux security...