Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-31259 (GCVE-0-2025-31259)
Vulnerability from cvelistv5
- An app may be able to gain elevated privileges
URL | Tags | ||||||
---|---|---|---|---|---|---|---|
|
{ "containers": { "adp": [ { "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" } }, { "other": { "content": { "id": "CVE-2025-31259", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2025-05-13T00:00:00+00:00", "version": "2.0.3" }, "type": "ssvc" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-05-14T04:01:08.599Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "macOS", "vendor": "Apple", "versions": [ { "lessThan": "15.5", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges." } ], "problemTypes": [ { "descriptions": [ { "description": "An app may be able to gain elevated privileges", "lang": "en" } ] } ], "providerMetadata": { "dateUpdated": "2025-05-12T21:42:27.483Z", "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple" }, "references": [ { "url": "https://support.apple.com/en-us/122716" } ] } }, "cveMetadata": { "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "assignerShortName": "apple", "cveId": "CVE-2025-31259", "datePublished": "2025-05-12T21:42:27.483Z", "dateReserved": "2025-03-27T16:13:58.337Z", "dateUpdated": "2025-05-14T04:01:08.599Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2025-31259\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-05-12T22:15:25.643\",\"lastModified\":\"2025-05-27T20:04:45.907\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges.\"},{\"lang\":\"es\",\"value\":\"El problema se solucion\u00f3 mejorando la limpieza de entrada. Este problema est\u00e1 corregido en macOS Sequoia 15.5. Una aplicaci\u00f3n podr\u00eda obtener privilegios elevados.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.5\",\"matchCriteriaId\":\"EF1B4AB8-2B51-4EED-BD29-C500C83FAB10\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/122716\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31259\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-13T13:58:11.648695Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20 Improper Input Validation\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-13T14:00:16.140Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"15.5\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/122716\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"An app may be able to gain elevated privileges\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2025-05-12T21:42:27.483Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2025-31259\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-13T14:00:21.522Z\", \"dateReserved\": \"2025-03-27T16:13:58.337Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-05-12T21:42:27.483Z\", \"assignerShortName\": \"apple\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
ncsc-2025-0151
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Apple heeft kwetsbaarheden verholpen in macOS (Specifiek voor Ventura 13.7.6, Sequoia 15.5 en Sonoma 14.7.6).", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden omvatten verschillende problemen, zoals geheugenbeschadiging door het verwerken van kwaadwillig gemaakte webinhoud, ongeautoriseerde toegang tot gevoelige gebruikersdata, en onverwachte systeemterminaties. Deze kwetsbaarheden kunnen worden misbruikt door kwaadwillenden om zich verhoogde rechten toe te kennen en zo toegang te krijgen tot gevoelige informatie of om de stabiliteit van het systeem in gevaar te brengen.", "title": "Interpretaties" }, { "category": "description", "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "CWE-310", "title": "CWE-310" }, { "category": "general", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" }, { "category": "general", "text": "CWE-265", "title": "CWE-265" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "CWE-275", "title": "CWE-275" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "Stack-based Buffer Overflow", "title": "CWE-121" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://support.apple.com/en-us/122718" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://support.apple.com/en-us/122717" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://support.apple.com/en-us/122716" } ], "title": "Kwetsbaarheden verholpen in Apple macOS", "tracking": { "current_release_date": "2025-05-13T09:19:37.094950Z", "generator": { "date": "2025-02-25T15:15:00Z", "engine": { "name": "V.A.", "version": "1.0" } }, "id": "NCSC-2025-0151", "initial_release_date": "2025-05-13T09:19:37.094950Z", "revision_history": [ { "date": "2025-05-13T09:19:37.094950Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/\u003e=13.0|\u003c13.7.5", "product": { "name": "vers:unknown/\u003e=13.0|\u003c13.7.5", "product_id": "CSAFPID-2620946", "product_identification_helper": { "cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/\u003e=14.0|\u003c14.7.5", "product": { "name": "vers:unknown/\u003e=14.0|\u003c14.7.5", "product_id": "CSAFPID-2620935", "product_identification_helper": { "cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "macOS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/\u003e=15.0|\u003c15.4", "product": { "name": "vers:unknown/\u003e=15.0|\u003c15.4", "product_id": "CSAFPID-2592049" } } ], "category": "product_name", "name": "macOS" } ], "category": "product_family", "name": "Apple" } ], "category": "vendor", "name": "Apple" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-8176", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Stack-based Buffer Overflow", "title": "CWE-121" }, { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "general", "text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2024-8176", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-8176.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] } ], "title": "CVE-2024-8176" }, { "cve": "CVE-2025-24142", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24142", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24142.json" } ], "title": "CVE-2025-24142" }, { "cve": "CVE-2025-24144", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24144", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24144.json" } ], "title": "CVE-2025-24144" }, { "cve": "CVE-2025-24155", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24155", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24155.json" } ], "title": "CVE-2025-24155" }, { "cve": "CVE-2025-24213", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)", "title": "CWE-843" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24213", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24213.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] } ], "title": "CVE-2025-24213" }, { "cve": "CVE-2025-24222", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24222", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24222.json" } ], "title": "CVE-2025-24222" }, { "cve": "CVE-2025-24223", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24223", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24223.json" } ], "title": "CVE-2025-24223" }, { "cve": "CVE-2025-24258", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24258", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24258.json" } ], "title": "CVE-2025-24258" }, { "cve": "CVE-2025-24274", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24274", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24274.json" } ], "title": "CVE-2025-24274" }, { "cve": "CVE-2025-26465", "cwe": { "id": "CWE-310", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-310", "title": "CWE-310" }, { "category": "other", "text": "Detection of Error Condition Without Action", "title": "CWE-390" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-26465", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26465.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] } ], "title": "CVE-2025-26465" }, { "cve": "CVE-2025-26466", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-26466", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26466.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] } ], "title": "CVE-2025-26466" }, { "cve": "CVE-2025-30440", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-30440", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30440.json" } ], "title": "CVE-2025-30440" }, { "cve": "CVE-2025-30442", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-30442", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30442.json" } ], "title": "CVE-2025-30442" }, { "cve": "CVE-2025-30443", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-30443", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30443.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] } ], "title": "CVE-2025-30443" }, { "cve": "CVE-2025-30448", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-30448", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30448.json" } ], "title": "CVE-2025-30448" }, { "cve": "CVE-2025-30453", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-30453", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30453.json" } ], "title": "CVE-2025-30453" }, { "cve": "CVE-2025-31196", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31196", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31196.json" } ], "title": "CVE-2025-31196" }, { "cve": "CVE-2025-31204", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31204", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31204.json" } ], "title": "CVE-2025-31204" }, { "cve": "CVE-2025-31205", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31205", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31205.json" } ], "title": "CVE-2025-31205" }, { "cve": "CVE-2025-31206", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31206", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31206.json" } ], "title": "CVE-2025-31206" }, { "cve": "CVE-2025-31208", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31208", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31208.json" } ], "title": "CVE-2025-31208" }, { "cve": "CVE-2025-31209", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31209", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31209.json" } ], "title": "CVE-2025-31209" }, { "cve": "CVE-2025-31212", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31212", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31212.json" } ], "title": "CVE-2025-31212" }, { "cve": "CVE-2025-31213", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31213", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31213.json" } ], "title": "CVE-2025-31213" }, { "cve": "CVE-2025-31215", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31215", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31215.json" } ], "title": "CVE-2025-31215" }, { "cve": "CVE-2025-31217", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31217", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31217.json" } ], "title": "CVE-2025-31217" }, { "cve": "CVE-2025-31218", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31218", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31218.json" } ], "title": "CVE-2025-31218" }, { "cve": "CVE-2025-31219", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31219", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31219.json" } ], "title": "CVE-2025-31219" }, { "cve": "CVE-2025-31220", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31220", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31220.json" } ], "title": "CVE-2025-31220" }, { "cve": "CVE-2025-31221", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31221", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31221.json" } ], "title": "CVE-2025-31221" }, { "cve": "CVE-2025-31222", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31222", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31222.json" } ], "title": "CVE-2025-31222" }, { "cve": "CVE-2025-31223", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31223", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31223.json" } ], "title": "CVE-2025-31223" }, { "cve": "CVE-2025-31224", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31224", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31224.json" } ], "title": "CVE-2025-31224" }, { "cve": "CVE-2025-31226", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31226", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31226.json" } ], "title": "CVE-2025-31226" }, { "cve": "CVE-2025-31232", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31232", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31232.json" } ], "title": "CVE-2025-31232" }, { "cve": "CVE-2025-31233", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31233", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31233.json" } ], "title": "CVE-2025-31233" }, { "cve": "CVE-2025-31234", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31234", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31234.json" } ], "title": "CVE-2025-31234" }, { "cve": "CVE-2025-31235", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "other", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31235", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31235.json" } ], "title": "CVE-2025-31235" }, { "cve": "CVE-2025-31236", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31236", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31236.json" } ], "title": "CVE-2025-31236" }, { "cve": "CVE-2025-31237", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31237", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31237.json" } ], "title": "CVE-2025-31237" }, { "cve": "CVE-2025-31238", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31238", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31238.json" } ], "title": "CVE-2025-31238" }, { "cve": "CVE-2025-31239", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31239", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31239.json" } ], "title": "CVE-2025-31239" }, { "cve": "CVE-2025-31240", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31240", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31240.json" } ], "title": "CVE-2025-31240" }, { "cve": "CVE-2025-31241", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "other", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31241", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31241.json" } ], "title": "CVE-2025-31241" }, { "cve": "CVE-2025-31242", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31242", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31242.json" } ], "title": "CVE-2025-31242" }, { "cve": "CVE-2025-31244", "cwe": { "id": "CWE-265", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-265", "title": "CWE-265" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31244", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31244.json" } ], "title": "CVE-2025-31244" }, { "cve": "CVE-2025-31245", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31245", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31245.json" } ], "title": "CVE-2025-31245" }, { "cve": "CVE-2025-31246", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31246", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31246.json" } ], "title": "CVE-2025-31246" }, { "cve": "CVE-2025-31247", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31247", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31247.json" } ], "title": "CVE-2025-31247" }, { "cve": "CVE-2025-31249", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31249", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31249.json" } ], "title": "CVE-2025-31249" }, { "cve": "CVE-2025-31250", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31250", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31250.json" } ], "title": "CVE-2025-31250" }, { "cve": "CVE-2025-31251", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31251", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31251.json" } ], "title": "CVE-2025-31251" }, { "cve": "CVE-2025-31256", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31256", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31256.json" } ], "title": "CVE-2025-31256" }, { "cve": "CVE-2025-31257", "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31257", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31257.json" } ], "title": "CVE-2025-31257" }, { "cve": "CVE-2025-31258", "cwe": { "id": "CWE-265", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-265", "title": "CWE-265" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31258", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31258.json" } ], "title": "CVE-2025-31258" }, { "cve": "CVE-2025-31259", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31259", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31259.json" } ], "title": "CVE-2025-31259" }, { "cve": "CVE-2025-31260", "cwe": { "id": "CWE-275", "name": "-" }, "notes": [ { "category": "other", "text": "CWE-275", "title": "CWE-275" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-2620946", "CSAFPID-2620935", "CSAFPID-2592049" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31260", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31260.json" } ], "title": "CVE-2025-31260" } ] }
ncsc-2025-0290
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Apple heeft kwetsbaarheden verholpen in macOS.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden omvatten verschillende problemen met betrekking tot de toegang tot gevoelige gebruikersdata, permissies, en beveiligingslekken die konden leiden tot ongeautoriseerde toegang of het omzeilen van sandbox-beperkingen. Deze kwetsbaarheden konden door kwaadwillenden worden misbruikt om gevoelige informatie te verkrijgen of om de stabiliteit van het systeem in gevaar te brengen. De updates zijn cruciaal voor het waarborgen van de integriteit en privacy van gebruikersdata.", "title": "Interpretaties" }, { "category": "description", "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "UNIX Symbolic Link (Symlink) Following", "title": "CWE-61" }, { "category": "general", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Buffer Over-read", "title": "CWE-126" }, { "category": "general", "text": "Numeric Truncation Error", "title": "CWE-197" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "CWE-265", "title": "CWE-265" }, { "category": "general", "text": "CWE-275", "title": "CWE-275" }, { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "general", "text": "Permission Race Condition During Resource Copy", "title": "CWE-689" }, { "category": "general", "text": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)", "title": "CWE-757" }, { "category": "general", "text": "Protection Mechanism Failure", "title": "CWE-693" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/125110" }, { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/125111" }, { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/125112" } ], "title": "Kwetsbaarheden verholpen in Apple macOS", "tracking": { "current_release_date": "2025-09-16T11:16:20.572265Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2025-0290", "initial_release_date": "2025-09-16T11:16:20.572265Z", "revision_history": [ { "date": "2025-09-16T11:16:20.572265Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "macOS Sequoia" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-2" } } ], "category": "product_name", "name": "macOS Sonoma" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-3" } } ], "category": "product_name", "name": "macOS Tahoe" } ], "category": "vendor", "name": "Apple" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-27280", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "other", "text": "Buffer Over-read", "title": "CWE-126" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2024-27280 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-27280.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] } ], "title": "CVE-2024-27280" }, { "cve": "CVE-2025-6965", "cwe": { "id": "CWE-197", "name": "Numeric Truncation Error" }, "notes": [ { "category": "other", "text": "Numeric Truncation Error", "title": "CWE-197" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-6965 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-6965.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] } ], "title": "CVE-2025-6965" }, { "cve": "CVE-2025-24088", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24088 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-24088.json" } ], "title": "CVE-2025-24088" }, { "cve": "CVE-2025-24197", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24197 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-24197.json" } ], "title": "CVE-2025-24197" }, { "cve": "CVE-2025-31255", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31255 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31255.json" } ], "title": "CVE-2025-31255" }, { "cve": "CVE-2025-31259", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31259 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31259.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] } ], "title": "CVE-2025-31259" }, { "cve": "CVE-2025-31268", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31268 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31268.json" } ], "title": "CVE-2025-31268" }, { "cve": "CVE-2025-31269", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31269 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31269.json" } ], "title": "CVE-2025-31269" }, { "cve": "CVE-2025-31270", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31270 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31270.json" } ], "title": "CVE-2025-31270" }, { "cve": "CVE-2025-31271", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-31271 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31271.json" } ], "title": "CVE-2025-31271" }, { "cve": "CVE-2025-40909", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "notes": [ { "category": "other", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "other", "text": "Permission Race Condition During Resource Copy", "title": "CWE-689" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40909 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40909.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] } ], "title": "CVE-2025-40909" }, { "cve": "CVE-2025-43190", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43190 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43190.json" } ], "title": "CVE-2025-43190" }, { "cve": "CVE-2025-43204", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43204 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43204.json" } ], "title": "CVE-2025-43204" }, { "cve": "CVE-2025-43207", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43207 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43207.json" } ], "title": "CVE-2025-43207" }, { "cve": "CVE-2025-43208", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43208 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43208.json" } ], "title": "CVE-2025-43208" }, { "cve": "CVE-2025-43231", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43231 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43231.json" } ], "title": "CVE-2025-43231" }, { "cve": "CVE-2025-43262", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43262 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43262.json" } ], "title": "CVE-2025-43262" }, { "cve": "CVE-2025-43272", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43272 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43272.json" } ], "title": "CVE-2025-43272" }, { "cve": "CVE-2025-43273", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "other", "text": "Protection Mechanism Failure", "title": "CWE-693" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43273 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43273.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] } ], "title": "CVE-2025-43273" }, { "cve": "CVE-2025-43277", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "other", "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer", "title": "CWE-119" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43277 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43277.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] } ], "title": "CVE-2025-43277" }, { "cve": "CVE-2025-43279", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43279 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43279.json" } ], "title": "CVE-2025-43279" }, { "cve": "CVE-2025-43283", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43283 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43283.json" } ], "title": "CVE-2025-43283" }, { "cve": "CVE-2025-43285", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43285 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43285.json" } ], "title": "CVE-2025-43285" }, { "cve": "CVE-2025-43286", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43286 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43286.json" } ], "title": "CVE-2025-43286" }, { "cve": "CVE-2025-43287", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43287 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43287.json" } ], "title": "CVE-2025-43287" }, { "cve": "CVE-2025-43291", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43291 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43291.json" } ], "title": "CVE-2025-43291" }, { "cve": "CVE-2025-43292", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43292 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43292.json" } ], "title": "CVE-2025-43292" }, { "cve": "CVE-2025-43293", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43293 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43293.json" } ], "title": "CVE-2025-43293" }, { "cve": "CVE-2025-43294", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43294 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43294.json" } ], "title": "CVE-2025-43294" }, { "cve": "CVE-2025-43295", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43295 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43295.json" } ], "title": "CVE-2025-43295" }, { "cve": "CVE-2025-43297", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43297 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43297.json" } ], "title": "CVE-2025-43297" }, { "cve": "CVE-2025-43298", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43298 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43298.json" } ], "title": "CVE-2025-43298" }, { "cve": "CVE-2025-43299", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43299 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43299.json" } ], "title": "CVE-2025-43299" }, { "cve": "CVE-2025-43301", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43301 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43301.json" } ], "title": "CVE-2025-43301" }, { "cve": "CVE-2025-43302", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43302 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43302.json" } ], "title": "CVE-2025-43302" }, { "cve": "CVE-2025-43303", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43303 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43303.json" } ], "title": "CVE-2025-43303" }, { "cve": "CVE-2025-43304", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43304 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43304.json" } ], "title": "CVE-2025-43304" }, { "cve": "CVE-2025-43305", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43305 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43305.json" } ], "title": "CVE-2025-43305" }, { "cve": "CVE-2025-43307", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43307 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43307.json" } ], "title": "CVE-2025-43307" }, { "cve": "CVE-2025-43308", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43308 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43308.json" } ], "title": "CVE-2025-43308" }, { "cve": "CVE-2025-43310", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43310 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43310.json" } ], "title": "CVE-2025-43310" }, { "cve": "CVE-2025-43311", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43311 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43311.json" } ], "title": "CVE-2025-43311" }, { "cve": "CVE-2025-43312", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43312 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43312.json" } ], "title": "CVE-2025-43312" }, { "cve": "CVE-2025-43314", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43314 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43314.json" } ], "title": "CVE-2025-43314" }, { "cve": "CVE-2025-43315", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43315 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43315.json" } ], "title": "CVE-2025-43315" }, { "cve": "CVE-2025-43316", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43316 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43316.json" } ], "title": "CVE-2025-43316" }, { "cve": "CVE-2025-43317", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43317 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43317.json" } ], "title": "CVE-2025-43317" }, { "cve": "CVE-2025-43318", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43318 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43318.json" } ], "title": "CVE-2025-43318" }, { "cve": "CVE-2025-43319", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43319 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43319.json" } ], "title": "CVE-2025-43319" }, { "cve": "CVE-2025-43321", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43321 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43321.json" } ], "title": "CVE-2025-43321" }, { "cve": "CVE-2025-43325", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43325 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43325.json" } ], "title": "CVE-2025-43325" }, { "cve": "CVE-2025-43326", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43326 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43326.json" } ], "title": "CVE-2025-43326" }, { "cve": "CVE-2025-43327", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43327 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43327.json" } ], "title": "CVE-2025-43327" }, { "cve": "CVE-2025-43328", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43328 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43328.json" } ], "title": "CVE-2025-43328" }, { "cve": "CVE-2025-43329", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43329 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43329.json" } ], "title": "CVE-2025-43329" }, { "cve": "CVE-2025-43330", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43330 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43330.json" } ], "title": "CVE-2025-43330" }, { "cve": "CVE-2025-43331", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43331 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43331.json" } ], "title": "CVE-2025-43331" }, { "cve": "CVE-2025-43332", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43332 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43332.json" } ], "title": "CVE-2025-43332" }, { "cve": "CVE-2025-43333", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43333 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43333.json" } ], "title": "CVE-2025-43333" }, { "cve": "CVE-2025-43337", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43337 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43337.json" } ], "title": "CVE-2025-43337" }, { "cve": "CVE-2025-43340", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43340 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43340.json" } ], "title": "CVE-2025-43340" }, { "cve": "CVE-2025-43341", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43341 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43341.json" } ], "title": "CVE-2025-43341" }, { "cve": "CVE-2025-43342", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43342 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43342.json" } ], "title": "CVE-2025-43342" }, { "cve": "CVE-2025-43343", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43343 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43343.json" } ], "title": "CVE-2025-43343" }, { "cve": "CVE-2025-43344", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43344 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43344.json" } ], "title": "CVE-2025-43344" }, { "cve": "CVE-2025-43346", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43346 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43346.json" } ], "title": "CVE-2025-43346" }, { "cve": "CVE-2025-43347", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43347 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43347.json" } ], "title": "CVE-2025-43347" }, { "cve": "CVE-2025-43349", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43349 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43349.json" } ], "title": "CVE-2025-43349" }, { "cve": "CVE-2025-43353", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43353 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43353.json" } ], "title": "CVE-2025-43353" }, { "cve": "CVE-2025-43354", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43354 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43354.json" } ], "title": "CVE-2025-43354" }, { "cve": "CVE-2025-43355", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43355 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43355.json" } ], "title": "CVE-2025-43355" }, { "cve": "CVE-2025-43356", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43356 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43356.json" } ], "title": "CVE-2025-43356" }, { "cve": "CVE-2025-43357", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43357 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43357.json" } ], "title": "CVE-2025-43357" }, { "cve": "CVE-2025-43358", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43358 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43358.json" } ], "title": "CVE-2025-43358" }, { "cve": "CVE-2025-43359", "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43359 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43359.json" } ], "title": "CVE-2025-43359" }, { "cve": "CVE-2025-43366", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43366 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43366.json" } ], "title": "CVE-2025-43366" }, { "cve": "CVE-2025-43367", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43367 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43367.json" } ], "title": "CVE-2025-43367" }, { "cve": "CVE-2025-43368", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43368 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43368.json" } ], "title": "CVE-2025-43368" }, { "cve": "CVE-2025-43369", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43369 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43369.json" } ], "title": "CVE-2025-43369" }, { "cve": "CVE-2025-43372", "notes": [ { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3" ] }, "references": [ { "category": "self", "summary": "CVE-2025-43372 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43372.json" } ], "title": "CVE-2025-43372" } ] }
fkie_cve-2025-31259
Vulnerability from fkie_nvd
URL | Tags | ||
---|---|---|---|
product-security@apple.com | https://support.apple.com/en-us/122716 | Release Notes, Vendor Advisory |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF1B4AB8-2B51-4EED-BD29-C500C83FAB10", "versionEndExcluding": "15.5", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges." }, { "lang": "es", "value": "El problema se solucion\u00f3 mejorando la limpieza de entrada. Este problema est\u00e1 corregido en macOS Sequoia 15.5. Una aplicaci\u00f3n podr\u00eda obtener privilegios elevados." } ], "id": "CVE-2025-31259", "lastModified": "2025-05-27T20:04:45.907", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ] }, "published": "2025-05-12T22:15:25.643", "references": [ { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/122716" } ], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ] }
CERTFR-2025-AVI-0393
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Apple indique que la vulnérabilité CVE-2025-31200 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Vendor | Product | Description | ||
---|---|---|---|---|
Apple | macOS | macOS Sonoma versions antérieures à 14.7.6 | ||
Apple | macOS | macOS Sequoia versions antérieures à 15.5 | ||
Apple | iPadOS | iPadOS versions 18.x antérieures à 18.5 | ||
Apple | N/A | watchOS versions antérieures à 11.5 | ||
Apple | Safari | Safari versions antérieures à 18.5 | ||
Apple | N/A | visionOS versions antérieures à 2.5 | ||
Apple | macOS | macOS Ventura versions antérieures à 13.7.6 | ||
Apple | iPadOS | iPadOS versions antérieures à 17.7.7 | ||
Apple | iOS | iOS versions antérieures à 18.5 | ||
Apple | N/A | tvOS versions antérieures à 18.5 |
Title | Publication Time | Tags | |||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.7.6", "product": { "name": "macOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.5", "product": { "name": "macOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iPadOS versions 18.x ant\u00e9rieures \u00e0 18.5", "product": { "name": "iPadOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "watchOS versions ant\u00e9rieures \u00e0 11.5", "product": { "name": "N/A", "vendor": { "name": "Apple", "scada": false } } }, { "description": "Safari versions ant\u00e9rieures \u00e0 18.5", "product": { "name": "Safari", "vendor": { "name": "Apple", "scada": false } } }, { "description": "visionOS versions ant\u00e9rieures \u00e0 2.5", "product": { "name": "N/A", "vendor": { "name": "Apple", "scada": false } } }, { "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.7.6", "product": { "name": "macOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iPadOS versions ant\u00e9rieures \u00e0 17.7.7", "product": { "name": "iPadOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iOS versions ant\u00e9rieures \u00e0 18.5", "product": { "name": "iOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "tvOS versions ant\u00e9rieures \u00e0 18.5", "product": { "name": "N/A", "vendor": { "name": "Apple", "scada": false } } } ], "affected_systems_content": "", "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2025-31240", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31240" }, { "name": "CVE-2025-31247", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31247" }, { "name": "CVE-2025-26465", "url": "https://www.cve.org/CVERecord?id=CVE-2025-26465" }, { "name": "CVE-2025-31221", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31221" }, { "name": "CVE-2025-31209", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31209" }, { "name": "CVE-2025-24155", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24155" }, { "name": "CVE-2025-31204", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31204" }, { "name": "CVE-2025-31227", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31227" }, { "name": "CVE-2025-31218", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31218" }, { "name": "CVE-2025-31228", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31228" }, { "name": "CVE-2025-31226", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31226" }, { "name": "CVE-2025-31212", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31212" }, { "name": "CVE-2025-26466", "url": "https://www.cve.org/CVERecord?id=CVE-2025-26466" }, { "name": "CVE-2025-31208", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31208" }, { "name": "CVE-2024-8176", "url": "https://www.cve.org/CVERecord?id=CVE-2024-8176" }, { "name": "CVE-2025-24144", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24144" }, { "name": "CVE-2025-30440", "url": "https://www.cve.org/CVERecord?id=CVE-2025-30440" }, { "name": "CVE-2025-24142", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24142" }, { "name": "CVE-2025-24225", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24225" }, { "name": "CVE-2025-31219", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31219" }, { "name": "CVE-2025-31251", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31251" }, { "name": "CVE-2025-31217", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31217" }, { "name": "CVE-2025-31241", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31241" }, { "name": "CVE-2025-31196", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31196" }, { "name": "CVE-2025-31234", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31234" }, { "name": "CVE-2025-31245", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31245" }, { "name": "CVE-2025-31220", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31220" }, { "name": "CVE-2025-30442", "url": "https://www.cve.org/CVERecord?id=CVE-2025-30442" }, { "name": "CVE-2025-31235", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31235" }, { "name": "CVE-2025-31200", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31200" }, { "name": "CVE-2025-24097", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24097" }, { "name": "CVE-2025-30448", "url": "https://www.cve.org/CVERecord?id=CVE-2025-30448" }, { "name": "CVE-2025-31249", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31249" }, { "name": "CVE-2025-24274", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24274" }, { "name": "CVE-2025-31238", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31238" }, { "name": "CVE-2025-24220", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24220" }, { "name": "CVE-2025-31210", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31210" }, { "name": "CVE-2025-31207", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31207" }, { "name": "CVE-2025-31242", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31242" }, { "name": "CVE-2025-31206", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31206" }, { "name": "CVE-2025-31244", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31244" }, { "name": "CVE-2025-24259", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24259" }, { "name": "CVE-2025-31259", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31259" }, { "name": "CVE-2025-31232", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31232" }, { "name": "CVE-2025-31250", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31250" }, { "name": "CVE-2025-31223", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31223" }, { "name": "CVE-2025-31224", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31224" }, { "name": "CVE-2025-31214", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31214" }, { "name": "CVE-2025-31246", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31246" }, { "name": "CVE-2025-31213", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31213" }, { "name": "CVE-2025-31256", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31256" }, { "name": "CVE-2025-24258", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24258" }, { "name": "CVE-2025-24111", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24111" }, { "name": "CVE-2025-24222", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24222" }, { "name": "CVE-2025-31225", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31225" }, { "name": "CVE-2025-31205", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31205" }, { "name": "CVE-2025-24223", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24223" }, { "name": "CVE-2025-24213", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24213" }, { "name": "CVE-2025-31260", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31260" }, { "name": "CVE-2025-31236", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31236" }, { "name": "CVE-2025-31222", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31222" }, { "name": "CVE-2025-31237", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31237" }, { "name": "CVE-2025-31257", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31257" }, { "name": "CVE-2025-31239", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31239" }, { "name": "CVE-2025-31233", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31233" }, { "name": "CVE-2025-30453", "url": "https://www.cve.org/CVERecord?id=CVE-2025-30453" }, { "name": "CVE-2025-31258", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31258" }, { "name": "CVE-2025-31253", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31253" }, { "name": "CVE-2025-31215", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31215" }, { "name": "CVE-2025-30443", "url": "https://www.cve.org/CVERecord?id=CVE-2025-30443" } ], "initial_release_date": "2025-05-13T00:00:00", "last_revision_date": "2025-05-13T00:00:00", "links": [], "reference": "CERTFR-2025-AVI-0393", "revisions": [ { "description": "Version initiale", "revision_date": "2025-05-13T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2025-31200 est activement exploit\u00e9e.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple", "vendor_advisories": [ { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122404", "url": "https://support.apple.com/en-us/122404" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122717", "url": "https://support.apple.com/en-us/122717" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122405", "url": "https://support.apple.com/en-us/122405" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122716", "url": "https://support.apple.com/en-us/122716" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122718", "url": "https://support.apple.com/en-us/122718" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122721", "url": "https://support.apple.com/en-us/122721" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122720", "url": "https://support.apple.com/en-us/122720" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122719", "url": "https://support.apple.com/en-us/122719" }, { "published_at": "2025-05-12", "title": "Bulletin de s\u00e9curit\u00e9 Apple 122722", "url": "https://support.apple.com/en-us/122722" } ] }
CERTFR-2025-AVI-0791
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Apple indique que la vulnérabilité CVE-2025-43300 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Vendor | Product | Description | ||
---|---|---|---|---|
Apple | iPadOS | iPadOS versions antérieures à 26 | ||
Apple | watchOS | watchOS versions antérieures à 26 | ||
Apple | iOS | iOS versions 16.x antérieures à 16.7.12 | ||
Apple | macOS | macOS Sonoma versions antérieures à 14.8 | ||
Apple | tvOS | tvOS versions antérieures à 26 | ||
Apple | macOS | macOS Sequoia versions antérieures à 15.7 | ||
Apple | iOS | iOS versions antérieures à 26 | ||
Apple | iOS | iOS versions 15.x antérieures à 15.8.5 | ||
Apple | iOS | iOS versions 18.x antérieures à 18.7 | ||
Apple | visionOS | visionOS versions antérieures à 26 | ||
Apple | Xcode | Xcode versions antérieures à 26 | ||
Apple | Safari | Safari versions antérieures à 26 | ||
Apple | iPadOS | iPadOS versions 15.x antérieures à 15.8.5 | ||
Apple | iPadOS | iPadOS versions 16.x antérieures à 16.7.12 | ||
Apple | macOS | macOS Tahoe versions antérieures à 26 | ||
Apple | iPadOS | iPadOS versions 18.x antérieures à 18.7 |
Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "iPadOS versions ant\u00e9rieures \u00e0 26", "product": { "name": "iPadOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "watchOS versions ant\u00e9rieures \u00e0 26", "product": { "name": "watchOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iOS versions 16.x ant\u00e9rieures \u00e0 16.7.12", "product": { "name": "iOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.8", "product": { "name": "macOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "tvOS versions ant\u00e9rieures \u00e0 26", "product": { "name": "tvOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.7", "product": { "name": "macOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iOS versions ant\u00e9rieures \u00e0 26", "product": { "name": "iOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iOS versions 15.x ant\u00e9rieures \u00e0 15.8.5", "product": { "name": "iOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iOS versions 18.x ant\u00e9rieures \u00e0 18.7", "product": { "name": "iOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "visionOS versions ant\u00e9rieures \u00e0 26", "product": { "name": "visionOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "Xcode versions ant\u00e9rieures \u00e0 26", "product": { "name": "Xcode", "vendor": { "name": "Apple", "scada": false } } }, { "description": "Safari versions ant\u00e9rieures \u00e0 26", "product": { "name": "Safari", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iPadOS versions 15.x ant\u00e9rieures \u00e0 15.8.5", "product": { "name": "iPadOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iPadOS versions 16.x ant\u00e9rieures \u00e0 16.7.12", "product": { "name": "iPadOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26", "product": { "name": "macOS", "vendor": { "name": "Apple", "scada": false } } }, { "description": "iPadOS versions 18.x ant\u00e9rieures \u00e0 18.7", "product": { "name": "iPadOS", "vendor": { "name": "Apple", "scada": false } } } ], "affected_systems_content": "", "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2025-43292", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43292" }, { "name": "CVE-2025-43372", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43372" }, { "name": "CVE-2025-43332", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43332" }, { "name": "CVE-2025-31270", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31270" }, { "name": "CVE-2025-43362", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43362" }, { "name": "CVE-2025-43319", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43319" }, { "name": "CVE-2025-43340", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43340" }, { "name": "CVE-2025-43327", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43327" }, { "name": "CVE-2025-30468", "url": "https://www.cve.org/CVERecord?id=CVE-2025-30468" }, { "name": "CVE-2025-43359", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43359" }, { "name": "CVE-2025-43262", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43262" }, { "name": "CVE-2024-27280", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27280" }, { "name": "CVE-2025-31269", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31269" }, { "name": "CVE-2025-43354", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43354" }, { "name": "CVE-2025-43326", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43326" }, { "name": "CVE-2025-43204", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43204" }, { "name": "CVE-2025-43273", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43273" }, { "name": "CVE-2025-43347", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43347" }, { "name": "CVE-2025-43302", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43302" }, { "name": "CVE-2025-43321", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43321" }, { "name": "CVE-2025-31254", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31254" }, { "name": "CVE-2025-43299", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43299" }, { "name": "CVE-2025-43316", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43316" }, { "name": "CVE-2025-43263", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43263" }, { "name": "CVE-2025-31255", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31255" }, { "name": "CVE-2025-43375", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43375" }, { "name": "CVE-2025-6965", "url": "https://www.cve.org/CVERecord?id=CVE-2025-6965" }, { "name": "CVE-2025-43355", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43355" }, { "name": "CVE-2025-43207", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43207" }, { "name": "CVE-2025-43285", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43285" }, { "name": "CVE-2025-43370", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43370" }, { "name": "CVE-2025-43312", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43312" }, { "name": "CVE-2025-43317", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43317" }, { "name": "CVE-2025-31271", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31271" }, { "name": "CVE-2025-43208", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43208" }, { "name": "CVE-2025-43283", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43283" }, { "name": "CVE-2025-48384", "url": "https://www.cve.org/CVERecord?id=CVE-2025-48384" }, { "name": "CVE-2025-43277", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43277" }, { "name": "CVE-2025-43325", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43325" }, { "name": "CVE-2025-43231", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43231" }, { "name": "CVE-2025-24197", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24197" }, { "name": "CVE-2025-43358", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43358" }, { "name": "CVE-2025-43328", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43328" }, { "name": "CVE-2025-43368", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43368" }, { "name": "CVE-2025-43315", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43315" }, { "name": "CVE-2025-43331", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43331" }, { "name": "CVE-2025-43310", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43310" }, { "name": "CVE-2025-43333", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43333" }, { "name": "CVE-2025-43203", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43203" }, { "name": "CVE-2025-43307", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43307" }, { "name": "CVE-2025-43297", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43297" }, { "name": "CVE-2025-43190", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43190" }, { "name": "CVE-2025-24088", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24088" }, { "name": "CVE-2025-43293", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43293" }, { "name": "CVE-2025-43343", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43343" }, { "name": "CVE-2025-43294", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43294" }, { "name": "CVE-2025-43286", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43286" }, { "name": "CVE-2025-43353", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43353" }, { "name": "CVE-2025-43356", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43356" }, { "name": "CVE-2025-43330", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43330" }, { "name": "CVE-2025-43272", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43272" }, { "name": "CVE-2025-31259", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31259" }, { "name": "CVE-2025-31268", "url": "https://www.cve.org/CVERecord?id=CVE-2025-31268" }, { "name": "CVE-2025-43366", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43366" }, { "name": "CVE-2025-43298", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43298" }, { "name": "CVE-2025-43369", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43369" }, { "name": "CVE-2025-43308", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43308" }, { "name": "CVE-2025-43346", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43346" }, { "name": "CVE-2025-40909", "url": "https://www.cve.org/CVERecord?id=CVE-2025-40909" }, { "name": "CVE-2025-43337", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43337" }, { "name": "CVE-2025-24133", "url": "https://www.cve.org/CVERecord?id=CVE-2025-24133" }, { "name": "CVE-2025-43279", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43279" }, { "name": "CVE-2025-43314", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43314" }, { "name": "CVE-2025-43300", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43300" }, { "name": "CVE-2025-43342", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43342" }, { "name": "CVE-2025-43349", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43349" }, { "name": "CVE-2025-43341", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43341" }, { "name": "CVE-2025-43301", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43301" }, { "name": "CVE-2025-43318", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43318" }, { "name": "CVE-2025-43344", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43344" }, { "name": "CVE-2025-43311", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43311" }, { "name": "CVE-2025-43287", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43287" }, { "name": "CVE-2025-43303", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43303" }, { "name": "CVE-2025-43304", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43304" }, { "name": "CVE-2025-43291", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43291" }, { "name": "CVE-2025-43329", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43329" }, { "name": "CVE-2025-43357", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43357" }, { "name": "CVE-2025-43367", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43367" }, { "name": "CVE-2025-43371", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43371" }, { "name": "CVE-2025-43295", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43295" }, { "name": "CVE-2025-43305", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43305" } ], "initial_release_date": "2025-09-16T00:00:00", "last_revision_date": "2025-09-16T00:00:00", "links": [], "reference": "CERTFR-2025-AVI-0791", "revisions": [ { "description": "Version initiale", "revision_date": "2025-09-16T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2025-43300 est activement exploit\u00e9e.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple", "vendor_advisories": [ { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125112", "url": "https://support.apple.com/en-us/125112" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125116", "url": "https://support.apple.com/en-us/125116" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125110", "url": "https://support.apple.com/en-us/125110" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125115", "url": "https://support.apple.com/en-us/125115" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125141", "url": "https://support.apple.com/en-us/125141" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125117", "url": "https://support.apple.com/en-us/125117" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125114", "url": "https://support.apple.com/en-us/125114" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125108", "url": "https://support.apple.com/en-us/125108" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125111", "url": "https://support.apple.com/en-us/125111" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125109", "url": "https://support.apple.com/en-us/125109" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125142", "url": "https://support.apple.com/en-us/125142" }, { "published_at": "2025-09-15", "title": "Bulletin de s\u00e9curit\u00e9 Apple 125113", "url": "https://support.apple.com/en-us/125113" } ] }
wid-sec-w-2025-2063
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen preiszugeben, Daten zu ver\u00e4ndern oder Sicherheitsma\u00dfnahmen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- MacOS X", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2025-2063 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2063.json" }, { "category": "self", "summary": "WID-SEC-2025-2063 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2063" }, { "category": "external", "summary": "APPLE-SA-09-15-2025-5 macOS Tahoe 26 vom 2025-09-15", "url": "https://lists.apple.com/archives/security-announce/2025/Sep/msg00004.html" }, { "category": "external", "summary": "APPLE-SA-09-15-2025-6 macOS Sequoia 15.7 vom 2025-09-15", "url": "https://lists.apple.com/archives/security-announce/2025/Sep/msg00005.html" }, { "category": "external", "summary": "APPLE-SA-09-15-2025-7 macOS Sonoma 14.8 vom 2025-09-15", "url": "https://lists.apple.com/archives/security-announce/2025/Sep/msg00006.html" }, { "category": "external", "summary": "macOS Tahoe 26 vom 2025-09-15", "url": "https://support.apple.com/en-us/125110" }, { "category": "external", "summary": "macOS Sequoia 15.7 vom 2025-09-15", "url": "https://support.apple.com/en-us/125111" }, { "category": "external", "summary": "macOS Sonoma 14.8 vom 2025-09-15", "url": "https://support.apple.com/en-us/125112" } ], "source_lang": "en-US", "title": "Apple macOS Sequoia, Sonoma und Tahoe: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-10-09T22:00:00.000+00:00", "generator": { "date": "2025-10-10T06:19:53.662+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2025-2063", "initial_release_date": "2025-09-15T22:00:00.000+00:00", "revision_history": [ { "date": "2025-09-15T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2025-09-16T22:00:00.000+00:00", "number": "2", "summary": "Referenz(en) aufgenommen: EUVD-2025-29277, EUVD-2025-29271, EUVD-2025-29273, EUVD-2025-29274, EUVD-2025-29275, EUVD-2025-29278, EUVD-2025-29276" }, { "date": "2025-10-09T22:00:00.000+00:00", "number": "3", "summary": "CVE erg\u00e4nzt" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "Tahoe \u003c26", "product": { "name": "Apple macOS Tahoe \u003c26", "product_id": "T047014" } }, { "category": "product_version", "name": "Tahoe 26", "product": { "name": "Apple macOS Tahoe 26", "product_id": "T047014-fixed", "product_identification_helper": { "cpe": "cpe:/o:apple:mac_os:tahoe__26" } } }, { "category": "product_version_range", "name": "Sequoia \u003c15.7", "product": { "name": "Apple macOS Sequoia \u003c15.7", "product_id": "T047015" } }, { "category": "product_version", "name": "Sequoia 15.7", "product": { "name": "Apple macOS Sequoia 15.7", "product_id": "T047015-fixed", "product_identification_helper": { "cpe": "cpe:/o:apple:mac_os:sequoia__15.7" } } }, { "category": "product_version_range", "name": "Sonoma \u003c14.8", "product": { "name": "Apple macOS Sonoma \u003c14.8", "product_id": "T047016" } }, { "category": "product_version", "name": "Sonoma 14.8", "product": { "name": "Apple macOS Sonoma 14.8", "product_id": "T047016-fixed", "product_identification_helper": { "cpe": "cpe:/o:apple:mac_os:sonoma__14.8" } } } ], "category": "product_name", "name": "macOS" } ], "category": "vendor", "name": "Apple" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-27280", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2024-27280" }, { "cve": "CVE-2025-24088", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-24088" }, { "cve": "CVE-2025-24197", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-24197" }, { "cve": "CVE-2025-31255", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-31255" }, { "cve": "CVE-2025-31259", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-31259" }, { "cve": "CVE-2025-31268", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-31268" }, { "cve": "CVE-2025-31269", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-31269" }, { "cve": "CVE-2025-31270", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-31270" }, { "cve": "CVE-2025-31271", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-31271" }, { "cve": "CVE-2025-40909", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-40909" }, { "cve": "CVE-2025-43190", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43190" }, { "cve": "CVE-2025-43204", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43204" }, { "cve": "CVE-2025-43207", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43207" }, { "cve": "CVE-2025-43208", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43208" }, { "cve": "CVE-2025-43231", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43231" }, { "cve": "CVE-2025-43262", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43262" }, { "cve": "CVE-2025-43272", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43272" }, { "cve": "CVE-2025-43273", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43273" }, { "cve": "CVE-2025-43277", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43277" }, { "cve": "CVE-2025-43279", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43279" }, { "cve": "CVE-2025-43283", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43283" }, { "cve": "CVE-2025-43285", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43285" }, { "cve": "CVE-2025-43286", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43286" }, { "cve": "CVE-2025-43287", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43287" }, { "cve": "CVE-2025-43291", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43291" }, { "cve": "CVE-2025-43292", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43292" }, { "cve": "CVE-2025-43293", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43293" }, { "cve": "CVE-2025-43294", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43294" }, { "cve": "CVE-2025-43295", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43295" }, { "cve": "CVE-2025-43296", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43296" }, { "cve": "CVE-2025-43297", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43297" }, { "cve": "CVE-2025-43298", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43298" }, { "cve": "CVE-2025-43299", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43299" }, { "cve": "CVE-2025-43301", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43301" }, { "cve": "CVE-2025-43302", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43302" }, { "cve": "CVE-2025-43303", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43303" }, { "cve": "CVE-2025-43304", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43304" }, { "cve": "CVE-2025-43305", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43305" }, { "cve": "CVE-2025-43307", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43307" }, { "cve": "CVE-2025-43308", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43308" }, { "cve": "CVE-2025-43310", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43310" }, { "cve": "CVE-2025-43311", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43311" }, { "cve": "CVE-2025-43312", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43312" }, { "cve": "CVE-2025-43314", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43314" }, { "cve": "CVE-2025-43315", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43315" }, { "cve": "CVE-2025-43316", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43316" }, { "cve": "CVE-2025-43317", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43317" }, { "cve": "CVE-2025-43318", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43318" }, { "cve": "CVE-2025-43319", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43319" }, { "cve": "CVE-2025-43321", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43321" }, { "cve": "CVE-2025-43325", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43325" }, { "cve": "CVE-2025-43326", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43326" }, { "cve": "CVE-2025-43327", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43327" }, { "cve": "CVE-2025-43328", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43328" }, { "cve": "CVE-2025-43329", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43329" }, { "cve": "CVE-2025-43330", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43330" }, { "cve": "CVE-2025-43331", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43331" }, { "cve": "CVE-2025-43332", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43332" }, { "cve": "CVE-2025-43333", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43333" }, { "cve": "CVE-2025-43337", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43337" }, { "cve": "CVE-2025-43340", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43340" }, { "cve": "CVE-2025-43341", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43341" }, { "cve": "CVE-2025-43342", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43342" }, { "cve": "CVE-2025-43343", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43343" }, { "cve": "CVE-2025-43344", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43344" }, { "cve": "CVE-2025-43346", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43346" }, { "cve": "CVE-2025-43347", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43347" }, { "cve": "CVE-2025-43349", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43349" }, { "cve": "CVE-2025-43353", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43353" }, { "cve": "CVE-2025-43354", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43354" }, { "cve": "CVE-2025-43355", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43355" }, { "cve": "CVE-2025-43356", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43356" }, { "cve": "CVE-2025-43357", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43357" }, { "cve": "CVE-2025-43358", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43358" }, { "cve": "CVE-2025-43359", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43359" }, { "cve": "CVE-2025-43366", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43366" }, { "cve": "CVE-2025-43367", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43367" }, { "cve": "CVE-2025-43368", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43368" }, { "cve": "CVE-2025-43369", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43369" }, { "cve": "CVE-2025-43372", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-43372" }, { "cve": "CVE-2025-6965", "product_status": { "known_affected": [ "T047016", "T047014", "T047015" ] }, "release_date": "2025-09-15T22:00:00.000+00:00", "title": "CVE-2025-6965" } ] }
ghsa-7r5r-3362-27j8
Vulnerability from github
The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges.
{ "affected": [], "aliases": [ "CVE-2025-31259" ], "database_specific": { "cwe_ids": [ "CWE-20" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-05-12T22:15:25Z", "severity": "HIGH" }, "details": "The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges.", "id": "GHSA-7r5r-3362-27j8", "modified": "2025-05-13T15:32:16Z", "published": "2025-05-13T00:31:16Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31259" }, { "type": "WEB", "url": "https://support.apple.com/en-us/122716" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.