CVE-2025-43293

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43293

A vulnerability in macOS was addressed through improved input validation. If left unpatched, an application may be able to access sensitive user data . This issue is fixed in macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . Remediation involves updating the operating system to the sp...

CVE-2025-43337

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43337

CVE-2025-43337 identifies an access issue in Apple macOS involving the AppleMobileFileIntegrity component. The vulnerability allows a malicious application to bypass security boundaries and access sensitive user data due to insufficient sandbox restrictions . This issue is resolved in macOS Sequo...

CVE-2025-24197

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-24197

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43317

A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data...

CVE-2025-43367

A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43367

A privacy issue exists in macOS Sonoma prior to 14.8 and macOS Tahoe prior to 26 due to the improper location of sensitive data. This vulnerability could allow an application to access protected user data . The issue was addressed by moving sensitive data to a more secure location. Remediation is...

CVE-2025-43367

A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43326

An out-of-bounds read vulnerability exists in the GPU Drivers of macOS. This issue was addressed with improved bounds checking. If exploited, an app may be able to access sensitive user data . The vulnerability is fixed in macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . No informati...

CVE-2025-43326

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43279

A privacy vulnerability exists in macOS versions prior to Tahoe 26 due to insufficient redaction of private data in log entries. This flaw could allow an application to access sensitive user-sensitive data . Remediation is available by updating to macOS Tahoe 26 or later. Exploitation details are...

CVE-2025-43307

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43307

Apple macOS Tahoe is affected by an underchecked vulnerability that allows an application to bypass security checks and access sensitive user data . This flaw is rooted in insufficient checks preventing unauthorized actions within the operating system. The issue has been addressed in macOS Tahoe ...

CVE-2025-24133

Affected software/hardware: Apple iOS and iPadOS. Vulnerability: keyboard suggestions may display sensitive information on the lock screen. Root cause: restrictions on options offered on a locked device; potential exposure of user data when the device is locked. Impact: could allow unauthorized v...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the filterKeyword function of the Blacklist Handler process in /com/ruoyi/generator/controller. An attacker can access or modify sensitive data, or disrupt application functionality by injecting malicious SQL statements...

Security Bulletin: IBM OpenPages Application API Response Caching Header Update

Summary Some IBM OpenPages API responses currently use the caching directive Cache-Control: max-age=0 instead of the more secure Cache-Control: no-store. While max-age=0 means the content is immediately stale, it may still be stored temporarily in browsers or intermediary caches. For sensitive...

WordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by D01EXPLOIT in WordPress Plugin Atarim versions = 4.2.1...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Tahoe is an operating system.... A security vulnerability exists in several Apple products that stems from improper handling of sensitive information and can be exploited...