ITSECURITY.GURU WHAT HAPPENED · DOES IT AFFECT YOU · WHAT TO DO
Search Contact
Menu
Search Contact
Board › Vulnerabilities

Vulnerabilities

7.2HighExploited

Palo Alto Networks PAN-OS Code Injection Vulnerability

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended 

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2026-0322 Full triage →

8.8HighExploited

Microsoft Windows Command Injection Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-96951 Full triage →

7.5HighExploited

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledg

No products entered. The advisory names Atlassian Confluence.

CVE-2026-21589 Full triage →

8.8HighExploited

Apple Multiple Products Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions o

No products entered. The advisory names Apple macOS.

CVE-2026-86950 Full triage →

8.1HighExploited

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-88772 Full triage →

9.8CriticalExploited

Citrix NetScaler Improper Input Validation Vulnerability

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2026-88771 Full triage →

8.1HighExploited

WordPress Core Remote File Inclusion Vulnerability

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.

No products entered. The advisory names WordPress WordPress core.

CVE-2026-87902 Full triage →

8.8HighExploited

Google Chromium V8 Out of Bounds Write Vulnerability

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

No products entered. The advisory names Google Chrome.

CVE-2026-87491 Full triage →

7.8HighExploited

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-81963 Full triage →

8.8HighExploited

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-85046 Full triage →

9.8CriticalExploited

Apple macOS Improper Authentication Vulnerability

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

No products entered. The advisory names Apple macOS.

CVE-2026-65400 Full triage →

9.8CriticalExploited

Broadcom VMware vCenter Path Traversal Vulnerability

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

No products entered. The advisory names VMware vCenter Server.

CVE-2026-59310 Full triage →

9.8CriticalExploited

WordPress Core Interpretation Conflict Vulnerability

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

No products entered. The advisory names WordPress WordPress core.

CVE-2026-63030 Full triage →

5.9MediumExploited

WordPress Core SQL Injection Vulnerability

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

No products entered. The advisory names WordPress WordPress core.

CVE-2026-60137 Full triage →

9.1CriticalExploited

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2026-0257 Full triage →

9.8CriticalExploited

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2026-0300 Full triage →

7.8HighExploited

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just

No products entered. The advisory names Red Hat Enterprise Linux and Canonical Ubuntu.

CVE-2026-31431 Full triage →

6.5MediumExploited

Fortinet Multiple Products Path Traversal Vulnerability

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versio

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-61624 Full triage →

7.5HighExploited

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

No products entered. The advisory names Red Hat Enterprise Linux.

CVE-2026-34486 Full triage →

8.8HighExploited

Google Dawn Use-After-Free Vulnerability

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-5281 Full triage →

8.8HighExploited

Google Skia Out-of-Bounds Write Vulnerability

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-3909 Full triage →

8.8HighExploited

Google Chromium CSS Use-After-Free Vulnerability

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2026-2441 Full triage →

7.8HighExploited

Apple Multiple Buffer Overflow Vulnerability

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals

No products entered. The advisory names Apple macOS.

CVE-2026-20700 Full triage →

7.8HighExploited

Microsoft Windows Type Confusion Vulnerability

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2026-21519 Full triage →

5.9MediumExploited

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-68686 Full triage →

9.8CriticalExploited

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2026-24858 Full triage →

9.8CriticalExploited

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-25249 Full triage →

8.8HighExploited

Apple Multiple Products Use-After-Free WebKit Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated at

No products entered. The advisory names Apple macOS.

CVE-2025-43529 Full triage →

5.5MediumExploited

Apple Multiple Products Classic Buffer Overflow Vulnerability

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

No products entered. The advisory names Apple macOS.

CVE-2025-43520 Full triage →

7.8HighExploited

Apple Multiple Products Improper Locking Vulnerability

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

No products entered. The advisory names Apple macOS.

CVE-2025-43510 Full triage →

8.8HighExploited

Google Chromium Out of Bounds Memory Access Vulnerability

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome and Apple macOS.

CVE-2025-14174 Full triage →

9.8CriticalExploited

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-59718 Full triage →

8.8HighExploited

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-13223 Full triage →

7.0HighExploited

Microsoft Windows Race Condition Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-62215 Full triage →

7.8HighExploited

Microsoft Windows Link Following Vulnerability

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-60710 Full triage →

8.8HighExploited

Apple Multiple products Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

No products entered. The advisory names Apple macOS.

CVE-2023-43000 Full triage →

7.8HighExploited

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-24990 Full triage →

7.7HighExploited

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earl

No products entered. The advisory names Cisco IOS XE.

CVE-2025-20352 Full triage →

9.8CriticalExploited

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-10585 Full triage →

9.8CriticalExploited

Citrix NetScaler Memory Overflow Vulnerability

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servic

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2025-7775 Full triage →

10.0CriticalExploited

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploi

No products entered. The advisory names Apple macOS.

CVE-2025-43300 Full triage →

8.8HighExploited

Apple Multiple Products Buffer Overflow Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

No products entered. The advisory names Apple macOS and Red Hat Enterprise Linux.

CVE-2025-31277 Full triage →

8.1HighExploited

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-6554 Full triage →

9.8CriticalExploited

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2025-6543 Full triage →

4.2MediumExploited

Apple Multiple Products Unspecified Vulnerability

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a repo

No products entered. The advisory names Apple macOS.

CVE-2025-43200 Full triage →

4.6MediumExploited

IGEL OS Use of a Key Past its Expiration Date Vulnerability

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

No products entered. The advisory names Microsoft Windows Server.

CVE-2025-47827 Full triage →

9.8CriticalExploited

Apple Multiple Products Arbitrary Read and Write Vulnerability

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individua

No products entered. The advisory names Apple macOS.

CVE-2025-31201 Full triage →

9.8CriticalExploited

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specif

No products entered. The advisory names Apple macOS.

CVE-2025-31200 Full triage →

8.3HighExploited

Google Chromium Mojo Sandbox Escape Vulnerability

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2025-2783 Full triage →

10.0CriticalExploited

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary f

No products entered. The advisory names Apple macOS.

CVE-2025-24201 Full triage →

6.0MediumExploited

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

No products entered. The advisory names VMware ESXi.

CVE-2025-22226 Full triage →

8.2HighExploited

VMware ESXi Arbitrary Write Vulnerability

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

No products entered. The advisory names VMware ESXi.

CVE-2025-22225 Full triage →

8.2HighExploited

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

No products entered. The advisory names VMware ESXi.

CVE-2025-22224 Full triage →

6.5MediumExploited

Palo Alto Networks PAN-OS File Read Vulnerability

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2025-0111 Full triage →

9.1CriticalExploited

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2025-0108 Full triage →

8.1HighExploited

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2025-24472 Full triage →

10.0CriticalExploited

Apple Multiple Products Use-After-Free Vulnerability

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS befor

No products entered. The advisory names Apple macOS.

CVE-2025-24085 Full triage →

9.8CriticalExploited

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2024-55591 Full triage →

7.5HighExploited

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-3393 Full triage →

6.3MediumExploited

Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

No products entered. The advisory names Apple macOS.

CVE-2024-44309 Full triage →

8.8HighExploited

Apple Multiple Products Code Execution Vulnerability

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

No products entered. The advisory names Apple macOS.

CVE-2024-44308 Full triage →

9.8CriticalExploited

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-0012 Full triage →

9.8CriticalExploited

Mozilla Firefox Use-After-Free Vulnerability

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

No products entered. The advisory names Mozilla Firefox.

CVE-2024-9680 Full triage →

9.8CriticalExploited

VMware vCenter Server Privilege Escalation Vulnerability

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

No products entered. The advisory names VMware vCenter Server.

CVE-2024-38813 Full triage →

9.8CriticalExploited

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

No products entered. The advisory names VMware vCenter Server.

CVE-2024-38812 Full triage →

9.6CriticalExploited

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-7971 Full triage →

7.5HighExploited

Oracle WebLogic Server Unspecified Vulnerability

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data o

No products entered. The advisory names Oracle WebLogic Server.

CVE-2024-21182 Full triage →

9.1CriticalExploited

Apache HTTP Server Improper Escaping of Output Vulnerability

Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. Substitutions in server context that use a backreferences or variables as the first segment of the su

No products entered. The advisory names Apache HTTP Server.

CVE-2024-38475 Full triage →

7.2HighExploited

VMware ESXi Authentication Bypass Vulnerability

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was dele

No products entered. The advisory names VMware ESXi.

CVE-2024-37085 Full triage →

9.8CriticalExploited

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

No products entered. The advisory names VMware vCenter Server.

CVE-2024-37079 Full triage →

9.6CriticalExploited

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-5274 Full triage →

9.6CriticalExploited

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-4947 Full triage →

9.6CriticalExploited

Google Chromium Visuals Use-After-Free Vulnerability

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2024-4671 Full triage →

10.0CriticalExploited

Palo Alto Networks PAN-OS Command Injection Vulnerability

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

No products entered. The advisory names Palo Alto Networks PAN-OS.

CVE-2024-3400 Full triage →

7.8HighExploited

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue

No products entered. The advisory names Apple macOS.

CVE-2024-23296 Full triage →

7.8HighExploited

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue

No products entered. The advisory names Apple macOS.

CVE-2024-23225 Full triage →

9.8CriticalExploited

Fortinet Multiple Products Format String Vulnerability

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized co

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2024-23113 Full triage →

9.8CriticalExploited

Fortinet FortiOS Out-of-Bound Write Vulnerability

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 al

No products entered. The advisory names Fortinet FortiGate (FortiOS).

CVE-2024-21762 Full triage →

8.8HighExploited

Apple Multiple Products WebKit Type Confusion Vulnerability

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was

No products entered. The advisory names Apple macOS.

CVE-2024-23222 Full triage →

8.8HighExploited

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.

No products entered. The advisory names Citrix NetScaler ADC.

CVE-2023-6548 Full triage →

9.8CriticalExploited

Atlassian Confluence Data Center and Server Template Injection Vulnerability

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates.

No products entered. The advisory names Atlassian Confluence.

CVE-2023-22527 Full triage →

9.1CriticalExploited

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

No products entered. The advisory names Ivanti Connect Secure.

CVE-2024-21887 Full triage →

7.0HighExploited

Apple Multiple Products Memory Corruption Vulnerability

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

No products entered. The advisory names Apple macOS.

CVE-2022-48618 Full triage →

7.8HighExploited

Linux Kernel Use-After-Free Vulnerability

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

No products entered. The advisory names Canonical Ubuntu.

CVE-2022-2586 Full triage →

8.8HighExploited

Apple Multiple Products WebKit Memory Corruption Vulnerability

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

No products entered. The advisory names Apple macOS.

CVE-2023-42917 Full triage →

6.5MediumExploited

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

No products entered. The advisory names Apple macOS.

CVE-2023-42916 Full triage →

9.6CriticalExploited

Google Skia Integer Overflow Vulnerability

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2023-6345 Full triage →

9.8CriticalExploited

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but

No products entered. The advisory names Atlassian Confluence.

CVE-2023-22518 Full triage →

9.8CriticalExploited

VMware vCenter Server Out-of-Bounds Write Vulnerability

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

No products entered. The advisory names VMware vCenter Server.

CVE-2023-34048 Full triage →

7.2HighExploited

Cisco IOS XE Web UI Command Injection Vulnerability

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating syste

No products entered. The advisory names Cisco IOS XE.

CVE-2023-20273 Full triage →

10.0CriticalExploited

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command

No products entered. The advisory names Cisco IOS XE.

CVE-2023-20198 Full triage →

7.5HighExploited

HTTP/2 Rapid Reset Attack Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

No products entered. The advisory names Red Hat Enterprise Linux and Cisco IOS XE.

CVE-2023-44487 Full triage →

9.8CriticalExploited

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence si

No products entered. The advisory names Atlassian Confluence.

CVE-2023-22515 Full triage →

7.8HighExploited

GNU C Library Buffer Overflow Vulnerability

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

No products entered. The advisory names Red Hat Enterprise Linux and Canonical Ubuntu.

CVE-2023-4911 Full triage →

8.8HighExploited

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Mozilla Firefox, Google Chrome and Red Hat Enterprise Linux.

CVE-2023-5217 Full triage →

6.6MediumExploited

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash. This vulnerability is due to insufficient validation of attributes in the Gr

No products entered. The advisory names Cisco IOS XE.

CVE-2023-20109 Full triage →

8.8HighExploited

Apple Multiple Products WebKit Code Execution Vulnerability

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

No products entered. The advisory names Apple macOS.

CVE-2023-41993 Full triage →

7.8HighExploited

Apple Multiple Products Kernel Privilege Escalation Vulnerability

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

No products entered. The advisory names Apple macOS.

CVE-2023-41992 Full triage →

5.5MediumExploited

Apple Multiple Products Improper Certificate Validation Vulnerability

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

No products entered. The advisory names Apple macOS.

CVE-2023-41991 Full triage →

8.8HighExploited

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

No products entered. The advisory names Google Chrome and Mozilla Firefox.

CVE-2023-4863 Full triage →

7.8HighExploited

Apple Multiple Products Code Execution Vulnerability

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released befo

No products entered. The advisory names Apple macOS.

CVE-2023-41990 Full triage →

7.8HighExploited

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

No products entered. The advisory names Apple macOS.

CVE-2023-41064 Full triage →

8.8HighExploited

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

No products entered. The advisory names Google Chrome.

CVE-2023-4762 Full triage →

8.8HighExploited

Apple Multiple Products Unspecified Vulnerability

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

No products entered. The advisory names Apple macOS.

CVE-2022-48503 Full triage →

5.5MediumExploited

Apple Multiple Products Kernel Unspecified Vulnerability

This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15

No products entered. The advisory names Apple macOS.

CVE-2023-38606 Full triage →