12583 matches found
CVE-2025-24237
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination...
CVE-2025-24209
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-24192
A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...
CVE-2025-24213
CVE-2025-24213 is a type-confusion vulnerability in WebKit-related components that can lead to memory corruption. Affected platforms include Apple OSes (macOS Sequoia 15.5, iOS 18.5 / iPadOS 18.5, tvOS 18.5, watchOS 11.5, visionOS 2.5, Safari 18.5) with fixation described as improved handling of ...
CVE-2025-24213
This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption...
CVE-2025-24209
CVE-2025-24209 is a WebKitGTK/WebKit-related vulnerability where processing maliciously crafted web content could cause an unexpected process crash due to a buffer/ memory handling issue. The issue affects webkitgtk/webkit2gtk, and multiple Linux distributions have assigned advisories to fix it (...
CVE-2025-30439
The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2025-30425
This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...
CVE-2025-31123
CVE-2025-31123 — Zitadel (open-source identity infrastructure) : A vulnerability exists where Zitadel fails to properly check the expiration date of the JWT key when used for Authorization Grants. An attacker with an expired key can obtain valid access tokens, while the JWT Profile for OAuth 2.0 ...
CVE-2025-30368 Zulip allows the deletion of organization by administrators of a different organization
Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any organization wa...
CGA-WHJ9-WG95-GW5W
Bulletin has no description...
CGA-JVG5-Q95M-9GJ9
Bulletin has no description...
CGA-J3JW-VR99-89R4
Bulletin has no description...
CGA-HHCP-8VVX-H8H6
Bulletin has no description...
CGA-HGFV-JG59-PQCH
Bulletin has no description...
CGA-888V-QGM9-M6XJ
Bulletin has no description...
CGA-W229-JGRQ-MJVW
Bulletin has no description...
CGA-VW5G-2WG8-HWWF
Bulletin has no description...