CVE-2025-43379

This issue was addressed with improved validation of symlinks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access protected user data...

EUVD-2019-18218

Malware in sbrugna...

EUVD-2019-18226

Malware in sbrugna...

EUVD-2013-6297

Malware in sbrugna...

EUVD-2020-30720

Malware in sbrugna...

EUVD-2017-5420

Malware in sbrugna...

EUVD-2024-43127

Malicious code in bioql PyPI...

EUVD-2025-29325

Malicious code in bioql PyPI...

EUVD-2025-8930

Malicious code in bioql PyPI...

EUVD-2023-46199

Malicious code in bioql PyPI...

EUVD-2024-52587

Malicious code in bioql PyPI...

EUVD-2025-14860

Malicious code in bioql PyPI...

EUVD-2021-7345

Malicious code in bioql PyPI...

EUVD-2023-45771

Malicious code in bioql PyPI...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. The vulnerabilities include several problems such as unauthorized access to sensitive user data, memory management issues, and vulnerabilities that could lead to denial-of-service or unexpected application crashes. These vulnerabilities could be...

Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack

Apple on Monday backported fixes for a recently patched security flaw that has been actively exploited in the wild. The vulnerability in question is CVE-2025-43300 CVSS score: 8.8, an out-of-bounds write issue in the ImageIO component that could result in memory corruption when processing a...

CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43354

CVE-2025-43354 corresponds to a logging issue that could allow access to sensitive user data. Apple fixes: the vulnerability is addressed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26 with improved data redaction. The Apple security content entry places this issue under Bluetooth, in...

CVE-2025-43356

CVE-2025-43356 affects WebKitGTK/WebKitGTK4 (webkit2gtk) across multiple Linux distributions. The issue stems from improper cache handling, allowing a website to access sensor information without user consent. Documented in Debian/AlmaLinux advisories and Amazon Linux advisories, with fixed versi...

PT-2025-37084

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks affected versions not specified Description: The vulnerability involves the cleartext exposure of service account passwords. It is a medium-severity issue. Recommendations: At the moment, there is no information about a new...