CVE-2025-24161

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24120

This issue was addressed by improved management of object lifetimes. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An attacker may be able to cause unexpected app termination...

CVE-2024-54497

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing web content may lead to a denial-of-service...

CVE-2024-54497

The CVE-2024-54497 issue is linked to processing web content and leads to a denial-of-service. Affected platforms include iPadOS/iOS (18.2 and 18.2 respectively), macOS (Ventura 13.7.3, Sonoma 14.7.3, Sequoia 15.2), visionOS 2.2, tvOS 18.2, and watchOS 11.2. The vulnerability has been addressed w...

CVE-2025-24102

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location...

CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs...

CVE-2025-24159

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2025-24174

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences...

CVE-2025-24139

A vulnerability in macOS allows for an unexpected app termination when parsing a maliciously crafted file . This issue is addressed with improved checks and is fixed in macOS Sequoia 15.3 , macOS Sonoma 14.7.3 , macOS Ventura 13.7.3 , and macOS Ventura 13.7.5 . No specific details regarding explo...

CVE-2025-24115

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox...

CVE-2024-54537

CVE-2024-54537 affects macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. In QuickTime Player, an app may read and write files outside its sandbox due to insufficient entitlement checks. The issue was addressed with additional entitlement checks; fixed in the listed OS versions.

CVE-2025-24124

CVE-2025-24124 affects several Apple platforms. The vulnerability involves a parsing issue that may cause an unexpected app termination. Mitigation is available via updates: iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS ...

CVE-2024-54468

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox...

CVE-2025-24112

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination...

CVE-2024-54536

The CVE-2024-54536 issue affects macOS Sequoia (15.2). It arises from insufficient validation of environment variables, allowing an app to edit NVRAM variables. Apple fixed this by improving environment variable validation in Sequoia 15.2. The available public descriptions confirm the vulnerabili...

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005549 fixes several issues. The following security issues were fixed: CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefileswithdrawcookie bsc1229275. CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio:...

SUSE-SU-2025:0250-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024103 fixes one issue. The following security issue was fixed: - CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324...

Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6...

PT-2025-47806

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 visionOS versions prior to 2.5 macOS Sonoma versions prior to 14.7.3 macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.5 watchOS versions prior to 11.5...

CVE-2025-22606 Coolify Command Injection Vulnerability in Project Name

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In version 4.0.0-beta.358 and possibly earlier versions, when creating or updating a "project," it is possible to inject arbitrary shell commands by altering the project name. If a name includes...