PT-2025-44899

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A use after free issue existed due to improper memory management. This could allow an application to cause unexpected system termination. Recommendations...

CVE-2025-43380: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. Parsing a file may lead to an unexpected app termination...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which originates from memory mishandling and could result in unexpected system...

PT-2025-44823

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An unprivileged process may be able to terminate a root processes...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in several Apple products that...

CVE-2025-43474: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2025-43373: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-43365: Improper Input Validation

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivileged process may be able to terminate a root processes...

CLSA-2025-1762180717 Fix CVE(s): CVE-2022-2343, CVE-2022-2522

SECURITY UPDATE: Reading past end of completion with a long line and 'infercase' set - debian/patches/CVE-2022-2343.patch: Allocate the string if needed - CVE-2022-2343 SECURITY UPDATE: Accessing uninitialized memory when completing long line - debian/patches/CVE-2022-2522.patch: Terminate string...

PT-2025-44824

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be able to cause unexpected system termination or corrupt kernel memory due to improper memory handling. Recommendations Update to macO...

PT-2025-50987

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.1 Description An application may be able to cause unexpected system termination or corrupt process memory due to improper memory handling. Recommendations Update to macOS Tahoe 26.1...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, terraform-provider-azuread, fq, velero-plugin-for-csi, manifest-tool, neuvector-dbgen, kbld, bazelisk, conjur-cli, vault-env, velero-plugin-for-microsoft-azure, terraform-docs, wireguard-go, kube-logging-operator-custom-runner,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, velero-plugin-for-microsoft-azure, falco-exporter, ghaudit, kapp, kube-rbac-proxy, kaf, terraform-provider-random, policy-controller, redka, sops, swagger, docker-credential-acr-env, cloud-provider-vsphere,...