CVE-2025-31236

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data...

CVE-2025-31260

A permissions issue in macOS allows an application to potentially access sensitive user data due to insufficient restrictions. This vulnerability is addressed in macOS Sequoia 15.5 . No specific exploit details or evidence of in-the-wild exploitation are provided in the documents.

CVE-2025-31260

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data...

CVE-2025-31250

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data...

CVE-2025-31250

An information disclosure issue in macOS Sequoia 15.5 allows an application to potentially access sensitive user data . The vulnerability was addressed by Apple through improved privacy controls . This issue is officially fixed in version 15.5 . Exploitation details are not provided in the docume...

CVE-2025-31212

A vulnerability exists in the Core Bluetooth framework across multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The issue stems from deficiencies in access control and improved state management, which could allow an application to access and disclose se...

CVE-2025-31249

A logic issue in macOS allows an application to potentially access sensitive user data . This vulnerability was addressed with improved checks and is officially fixed in macOS Sequoia 15.5 . While the specific component or function is not detailed in the provided documents, the impact involves un...

CVE-2025-31232

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. A sandboxed app may be able to access sensitive user data...

CVE-2025-24142

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to access sensitive user data...

CVE-2025-31242

A privacy issue in Apple products was addressed by improving private data redaction for log entries. The vulnerability could allow an app to access sensitive user data . This issue is fixed in the following versions: iOS 18.5 , iPadOS 18.5 , iPadOS 17.7.7 , macOS Sequoia 15.5 , macOS Sonoma 14.7....

CVE-2025-40626

Reflected Cross-Site Scripting XSS vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform...

CVE-2025-40627 Reflected Cross-Site Scripting (XSS) in AbanteCart

Reflected Cross-Site Scripting XSS vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform...

CVE-2025-31260: Improper Access Control

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data...

CVE-2025-31250: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data...

CVE-2025-31249: Improper Authorization

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data...

CVE-2025-31232: Improper Access Control

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. A sandboxed app may be able to access sensitive user data...

PT-2025-20695

Name of the Vulnerable Software and Affected Versions AbanteCart version 1.4.0 Description A Reflected Cross-Site Scripting XSS issue allows an attacker to execute JavaScript code in a victim's browser by sending a malicious URL. This can be exploited to steal sensitive user data, such as session...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from a privacy issue and could lead to applications accessing sensitive user data...

PT-2025-20793 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: An information disclosure issue was addressed with improved privacy controls. This issue may allow an app to access sensitive user data. Recommendations: For versions prior to 15.5, update to macOS...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from an application that may access sensitive user data...