CVE tracker
303 subscribers
4.3K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2025-43349 - Apple Video File Processing Out-of-Bounds Write

CVE ID : CVE-2025-43349
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted video file may lead to unexpected app termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43353 - Apple macOS Heap Corruption Vulnerability

CVE ID : CVE-2025-43353
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. Processing a maliciously crafted string may lead to heap corruption.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43354 - Apple tvOS/WatchOS/macOS/iOS/iPadOS Sensitive Data Exposure

CVE ID : CVE-2025-43354
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A logging issue was addressed with improved data redaction. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43355 - Apple TVOS WatchOS Denial-of-Service Type Confusion

CVE ID : CVE-2025-43355
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to cause a denial-of-service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43356 - Apple Safari Sensor Information Disclosure Vulnerability

CVE ID : CVE-2025-43356
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26, Safari 26, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. A website may be able to access sensor information without user consent.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43357 - Apple Device User Fingerprinting Vulnerability

CVE ID : CVE-2025-43357
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to fingerprint the user.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43358 - Apple macOS/iOS/iPadOS Sandbox Bypass Permissions Vulnerability

CVE ID : CVE-2025-43358
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, iOS 18.7 and iPadOS 18.7, macOS Tahoe 26, iOS 26 and iPadOS 26. A shortcut may be able to bypass sandbox restrictions.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43359 - Apple tvOS/OS/watchOS/macOS Network Socket Binding Vulnerability

CVE ID : CVE-2025-43359
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A logic issue was addressed with improved state management. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. A UDP server socket bound to a local interface may become bound to all interfaces.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43362 - Apple iOS Keystroke Monitoring Vulnerability

CVE ID : CVE-2025-43362
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : The issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An app may be able to monitor keystrokes without user permission.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43366 - Apple macOS Tahoe Coprocessor Memory Disclosure

CVE ID : CVE-2025-43366
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to disclose coprocessor memory.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43367 - "Apple macOS User Data Protection Bypass"

CVE ID : CVE-2025-43367
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43368 - Safari Use-After-Free Vulnerability

CVE ID : CVE-2025-43368
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43369 - Apple macOS Tahoe Symlink Privilege Escalation

CVE ID : CVE-2025-43369
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43370 - Apple Xcode Path Handling Buffer Overflow

CVE ID : CVE-2025-43370
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43371 - Apple Xcode Sandbox Escalation

CVE ID : CVE-2025-43371
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43372 - Apple Media File Processing Denial of Service/Corrupt Memory

CVE ID : CVE-2025-43372
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-43375 - Apple Xcode Path Truncation Vulnerability

CVE ID : CVE-2025-43375
Published : Sept. 15, 2025, 11:15 p.m. | 1 hour, 43 minutes ago
Description : The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-59436 - Node-IP SSRF Vulnerability

CVE ID : CVE-2025-59436
Published : Sept. 16, 2025, midnight | 4 hours, 59 minutes ago
Description : The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-59437 - Node-IP SSRF Vulnerability

CVE ID : CVE-2025-59437
Published : Sept. 16, 2025, midnight | 4 hours, 59 minutes ago
Description : The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. NOTE: in current versions of several applications, connection attempts to the IP address 0 (interpreted as 0.0.0.0) are blocked with error messages such as net::ERR_ADDRESS_INVALID. However, in some situations that depend on both application version and operating system, connection attempts to 0 and 0.0.0.0 are considered connection attempts to 127.0.0.1 (and, for this reason, a false value of isPublic would be preferable).
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-59453 - Click Studios Passwordstate Authentication Bypass

CVE ID : CVE-2025-59453
Published : Sept. 16, 2025, midnight | 4 hours, 59 minutes ago
Description : Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency access. By using a crafted URL while on the Emergency Access web page, an unauthorized person can gain access to the Passwordstate Administration section.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2023-53280 - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue

CVE ID : CVE-2023-53280
Published : Sept. 16, 2025, 8:11 a.m. | 47 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue System crash when qla2x00_start_sp(sp) returns error code EGAIN and wake_up gets called for uninitialized wait queue sp->nvme_ls_waitq. qla2xxx [0000:37:00.1]-2121:5: Returning existing qpair of ffff8ae2c0513400 for idx=0 qla2xxx [0000:37:00.1]-700e:5: qla2x00_start_sp failed = 11 BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 P4D 0 Oops: 0000 [#1] SMP NOPTI Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 09/03/2021 Workqueue: nvme-wq nvme_fc_connect_ctrl_work [nvme_fc] RIP: 0010:__wake_up_common+0x4c/0x190 RSP: 0018:ffff95f3e0cb7cd0 EFLAGS: 00010086 RAX: 0000000000000000 RBX: ffff8b08d3b26328 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8b08d3b26320 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffe8 R10: 0000000000000000 R11: ffff95f3e0cb7a60 R12: ffff95f3e0cb7d20 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8b2fdf6c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000002f1e410002 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: __wake_up_common_lock+0x7c/0xc0 qla_nvme_ls_req+0x355/0x4c0 [qla2xxx] ? __nvme_fc_send_ls_req+0x260/0x380 [nvme_fc] ? nvme_fc_send_ls_req.constprop.42+0x1a/0x45 [nvme_fc] ? nvme_fc_connect_ctrl_work.cold.63+0x1e3/0xa7d [nvme_fc] Remove unused nvme_ls_waitq wait queue. nvme_ls_waitq logic was removed previously in the commits tagged Fixed: below.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...