Vulnerability-Lookup

WID-SEC-W-2026-0853

Vulnerability from csaf_certbund - Published: 2026-03-24 23:00 - Updated: 2026-05-11 22:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um seine Privilegien zu erhöhen.

Betroffene Betriebssysteme: - Linux - UNIX

CVE-2025-14524

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2025-55753

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2025-58098

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2025-59775

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2025-64505

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2025-65082

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2025-66200

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20607

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20631

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20632

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20633

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20637

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20639

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20643

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20651

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20657

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20660

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20664

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20665

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20668

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20684

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20687

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20688

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20690

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20691

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20692

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20693

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20694

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20695

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20697

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20698

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20699

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-20701

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28816

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28817

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28818

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28820

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28821

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28822

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28823

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28824

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28825

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28826

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28827

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28828

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28829

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28831

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28832

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28833

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28834

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28835

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28837

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28838

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28839

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28841

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28842

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28844

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28845

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28852

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28857

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28859

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28860

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28861

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28862

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28864

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28865

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28866

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28867

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28868

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28870

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28871

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28876

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28877

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28878

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28879

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28880

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28881

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28882

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28886

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28888

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28891

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28892

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28893

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

CVE-2026-28894

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Tahoe <26.4 Apple / macOS		Tahoe <26.4
Apple macOS Sonoma <14.8.5 Apple / macOS		Sonoma <14.8.5
Apple macOS Sequoia <15.7.5 Apple / macOS		Sequoia <15.7.5

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/126794	external
https://support.apple.com/en-us/126795	external
https://support.apple.com/en-us/126796	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuf\u00fchren, um Informationen offenzulegen, um Dateien zu manipulieren, und um seine Privilegien zu erh\u00f6hen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0853 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0853.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0853 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0853"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Tahoe 26.4 vom 2026-03-24",
        "url": "https://support.apple.com/en-us/126794"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Sequoia 15.7.5 vom 2026-03-24",
        "url": "https://support.apple.com/en-us/126795"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Sonoma 14.8.5 vom 2026-03-24",
        "url": "https://support.apple.com/en-us/126796"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple macOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-05-11T22:00:00.000+00:00",
      "generator": {
        "date": "2026-05-12T09:25:55.946+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0853",
      "initial_release_date": "2026-03-24T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-03-24T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-05-11T22:00:00.000+00:00",
          "number": "2",
          "summary": "CVE-2026-28860 erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Sonoma \u003c14.8.5",
                "product": {
                  "name": "Apple macOS Sonoma \u003c14.8.5",
                  "product_id": "T052124"
                }
              },
              {
                "category": "product_version",
                "name": "Sonoma 14.8.5",
                "product": {
                  "name": "Apple macOS Sonoma 14.8.5",
                  "product_id": "T052124-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sonoma__14.8.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sequoia \u003c15.7.5",
                "product": {
                  "name": "Apple macOS Sequoia \u003c15.7.5",
                  "product_id": "T052125"
                }
              },
              {
                "category": "product_version",
                "name": "Sequoia 15.7.5",
                "product": {
                  "name": "Apple macOS Sequoia 15.7.5",
                  "product_id": "T052125-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sequoia__15.7.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Tahoe \u003c26.4",
                "product": {
                  "name": "Apple macOS Tahoe \u003c26.4",
                  "product_id": "T052126"
                }
              },
              {
                "category": "product_version",
                "name": "Tahoe 26.4",
                "product": {
                  "name": "Apple macOS Tahoe 26.4",
                  "product_id": "T052126-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:tahoe__26.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14524",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-14524"
    },
    {
      "cve": "CVE-2025-55753",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-55753"
    },
    {
      "cve": "CVE-2025-58098",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-58098"
    },
    {
      "cve": "CVE-2025-59775",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-59775"
    },
    {
      "cve": "CVE-2025-64505",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-64505"
    },
    {
      "cve": "CVE-2025-65082",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-65082"
    },
    {
      "cve": "CVE-2025-66200",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2025-66200"
    },
    {
      "cve": "CVE-2026-20607",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20607"
    },
    {
      "cve": "CVE-2026-20631",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20631"
    },
    {
      "cve": "CVE-2026-20632",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20632"
    },
    {
      "cve": "CVE-2026-20633",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20633"
    },
    {
      "cve": "CVE-2026-20637",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20637"
    },
    {
      "cve": "CVE-2026-20639",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20639"
    },
    {
      "cve": "CVE-2026-20643",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20643"
    },
    {
      "cve": "CVE-2026-20651",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20651"
    },
    {
      "cve": "CVE-2026-20657",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20657"
    },
    {
      "cve": "CVE-2026-20660",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20660"
    },
    {
      "cve": "CVE-2026-20664",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20664"
    },
    {
      "cve": "CVE-2026-20665",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20665"
    },
    {
      "cve": "CVE-2026-20668",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20668"
    },
    {
      "cve": "CVE-2026-20684",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20684"
    },
    {
      "cve": "CVE-2026-20687",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20687"
    },
    {
      "cve": "CVE-2026-20688",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20688"
    },
    {
      "cve": "CVE-2026-20690",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20690"
    },
    {
      "cve": "CVE-2026-20691",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20691"
    },
    {
      "cve": "CVE-2026-20692",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20692"
    },
    {
      "cve": "CVE-2026-20693",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20693"
    },
    {
      "cve": "CVE-2026-20694",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20694"
    },
    {
      "cve": "CVE-2026-20695",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20695"
    },
    {
      "cve": "CVE-2026-20697",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20697"
    },
    {
      "cve": "CVE-2026-20698",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20698"
    },
    {
      "cve": "CVE-2026-20699",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20699"
    },
    {
      "cve": "CVE-2026-20701",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-20701"
    },
    {
      "cve": "CVE-2026-28816",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28816"
    },
    {
      "cve": "CVE-2026-28817",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28817"
    },
    {
      "cve": "CVE-2026-28818",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28818"
    },
    {
      "cve": "CVE-2026-28820",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28820"
    },
    {
      "cve": "CVE-2026-28821",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28821"
    },
    {
      "cve": "CVE-2026-28822",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28822"
    },
    {
      "cve": "CVE-2026-28823",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28823"
    },
    {
      "cve": "CVE-2026-28824",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28824"
    },
    {
      "cve": "CVE-2026-28825",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28825"
    },
    {
      "cve": "CVE-2026-28826",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28826"
    },
    {
      "cve": "CVE-2026-28827",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28827"
    },
    {
      "cve": "CVE-2026-28828",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28828"
    },
    {
      "cve": "CVE-2026-28829",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28829"
    },
    {
      "cve": "CVE-2026-28831",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28831"
    },
    {
      "cve": "CVE-2026-28832",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28832"
    },
    {
      "cve": "CVE-2026-28833",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28833"
    },
    {
      "cve": "CVE-2026-28834",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28834"
    },
    {
      "cve": "CVE-2026-28835",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28835"
    },
    {
      "cve": "CVE-2026-28837",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28837"
    },
    {
      "cve": "CVE-2026-28838",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28838"
    },
    {
      "cve": "CVE-2026-28839",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28839"
    },
    {
      "cve": "CVE-2026-28841",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28841"
    },
    {
      "cve": "CVE-2026-28842",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28842"
    },
    {
      "cve": "CVE-2026-28844",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28844"
    },
    {
      "cve": "CVE-2026-28845",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28845"
    },
    {
      "cve": "CVE-2026-28852",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28852"
    },
    {
      "cve": "CVE-2026-28857",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28857"
    },
    {
      "cve": "CVE-2026-28859",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28859"
    },
    {
      "cve": "CVE-2026-28860",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28860"
    },
    {
      "cve": "CVE-2026-28861",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28861"
    },
    {
      "cve": "CVE-2026-28862",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28862"
    },
    {
      "cve": "CVE-2026-28864",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28864"
    },
    {
      "cve": "CVE-2026-28865",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28865"
    },
    {
      "cve": "CVE-2026-28866",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28866"
    },
    {
      "cve": "CVE-2026-28867",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28867"
    },
    {
      "cve": "CVE-2026-28868",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28868"
    },
    {
      "cve": "CVE-2026-28870",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28870"
    },
    {
      "cve": "CVE-2026-28871",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28871"
    },
    {
      "cve": "CVE-2026-28876",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28876"
    },
    {
      "cve": "CVE-2026-28877",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28877"
    },
    {
      "cve": "CVE-2026-28878",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28878"
    },
    {
      "cve": "CVE-2026-28879",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28879"
    },
    {
      "cve": "CVE-2026-28880",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28880"
    },
    {
      "cve": "CVE-2026-28881",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28881"
    },
    {
      "cve": "CVE-2026-28882",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28882"
    },
    {
      "cve": "CVE-2026-28886",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28886"
    },
    {
      "cve": "CVE-2026-28888",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28888"
    },
    {
      "cve": "CVE-2026-28891",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28891"
    },
    {
      "cve": "CVE-2026-28892",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28892"
    },
    {
      "cve": "CVE-2026-28893",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28893"
    },
    {
      "cve": "CVE-2026-28894",
      "product_status": {
        "known_affected": [
          "T052126",
          "T052124",
          "T052125"
        ]
      },
      "release_date": "2026-03-24T23:00:00.000+00:00",
      "title": "CVE-2026-28894"
    }
  ]
}

CVE-2025-14524 (GCVE-0-2025-14524)

Vulnerability from cvelistv5 – Published: 2026-01-08 10:07 – Updated: 2026-04-02 13:20

Title

bearer token leak on cross-protocol redirect

Summary

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-522 Insufficiently Protected Credentials

Assigner

curl

References

4 references

URL	Tags
https://curl.se/docs/CVE-2025-14524.json
https://curl.se/docs/CVE-2025-14524.html
https://hackerone.com/reports/3459417
http://www.openwall.com/lists/oss-security/2026/01/07/4

Impacted products

1 product

Vendor	Product	Version
curl	curl	Affected: 8.17.0 , ≤ 8.17.0 (semver) Affected: 8.16.0 , ≤ 8.16.0 (semver) Affected: 8.15.0 , ≤ 8.15.0 (semver) Affected: 8.14.1 , ≤ 8.14.1 (semver) Affected: 8.14.0 , ≤ 8.14.0 (semver) Affected: 8.13.0 , ≤ 8.13.0 (semver) Affected: 8.12.1 , ≤ 8.12.1 (semver) Affected: 8.12.0 , ≤ 8.12.0 (semver) Affected: 8.11.1 , ≤ 8.11.1 (semver) Affected: 8.11.0 , ≤ 8.11.0 (semver) Affected: 8.10.1 , ≤ 8.10.1 (semver) Affected: 8.10.0 , ≤ 8.10.0 (semver) Affected: 8.9.1 , ≤ 8.9.1 (semver) Affected: 8.9.0 , ≤ 8.9.0 (semver) Affected: 8.8.0 , ≤ 8.8.0 (semver) Affected: 8.7.1 , ≤ 8.7.1 (semver) Affected: 8.7.0 , ≤ 8.7.0 (semver) Affected: 8.6.0 , ≤ 8.6.0 (semver) Affected: 8.5.0 , ≤ 8.5.0 (semver) Affected: 8.4.0 , ≤ 8.4.0 (semver) Affected: 8.3.0 , ≤ 8.3.0 (semver) Affected: 8.2.1 , ≤ 8.2.1 (semver) Affected: 8.2.0 , ≤ 8.2.0 (semver) Affected: 8.1.2 , ≤ 8.1.2 (semver) Affected: 8.1.1 , ≤ 8.1.1 (semver) Affected: 8.1.0 , ≤ 8.1.0 (semver) Affected: 8.0.1 , ≤ 8.0.1 (semver) Affected: 8.0.0 , ≤ 8.0.0 (semver) Affected: 7.88.1 , ≤ 7.88.1 (semver) Affected: 7.88.0 , ≤ 7.88.0 (semver) Affected: 7.87.0 , ≤ 7.87.0 (semver) Affected: 7.86.0 , ≤ 7.86.0 (semver) Affected: 7.85.0 , ≤ 7.85.0 (semver) Affected: 7.84.0 , ≤ 7.84.0 (semver) Affected: 7.83.1 , ≤ 7.83.1 (semver) Affected: 7.83.0 , ≤ 7.83.0 (semver) Affected: 7.82.0 , ≤ 7.82.0 (semver) Affected: 7.81.0 , ≤ 7.81.0 (semver) Affected: 7.80.0 , ≤ 7.80.0 (semver) Affected: 7.79.1 , ≤ 7.79.1 (semver) Affected: 7.79.0 , ≤ 7.79.0 (semver) Affected: 7.78.0 , ≤ 7.78.0 (semver) Affected: 7.77.0 , ≤ 7.77.0 (semver) Affected: 7.76.1 , ≤ 7.76.1 (semver) Affected: 7.76.0 , ≤ 7.76.0 (semver) Affected: 7.75.0 , ≤ 7.75.0 (semver) Affected: 7.74.0 , ≤ 7.74.0 (semver) Affected: 7.73.0 , ≤ 7.73.0 (semver) Affected: 7.72.0 , ≤ 7.72.0 (semver) Affected: 7.71.1 , ≤ 7.71.1 (semver) Affected: 7.71.0 , ≤ 7.71.0 (semver) Affected: 7.70.0 , ≤ 7.70.0 (semver) Affected: 7.69.1 , ≤ 7.69.1 (semver) Affected: 7.69.0 , ≤ 7.69.0 (semver) Affected: 7.68.0 , ≤ 7.68.0 (semver) Affected: 7.67.0 , ≤ 7.67.0 (semver) Affected: 7.66.0 , ≤ 7.66.0 (semver) Affected: 7.65.3 , ≤ 7.65.3 (semver) Affected: 7.65.2 , ≤ 7.65.2 (semver) Affected: 7.65.1 , ≤ 7.65.1 (semver) Affected: 7.65.0 , ≤ 7.65.0 (semver) Affected: 7.64.1 , ≤ 7.64.1 (semver) Affected: 7.64.0 , ≤ 7.64.0 (semver) Affected: 7.63.0 , ≤ 7.63.0 (semver) Affected: 7.62.0 , ≤ 7.62.0 (semver) Affected: 7.61.1 , ≤ 7.61.1 (semver) Affected: 7.61.0 , ≤ 7.61.0 (semver) Affected: 7.60.0 , ≤ 7.60.0 (semver) Affected: 7.59.0 , ≤ 7.59.0 (semver) Affected: 7.58.0 , ≤ 7.58.0 (semver) Affected: 7.57.0 , ≤ 7.57.0 (semver) Affected: 7.56.1 , ≤ 7.56.1 (semver) Affected: 7.56.0 , ≤ 7.56.0 (semver) Affected: 7.55.1 , ≤ 7.55.1 (semver) Affected: 7.55.0 , ≤ 7.55.0 (semver) Affected: 7.54.1 , ≤ 7.54.1 (semver) Affected: 7.54.0 , ≤ 7.54.0 (semver) Affected: 7.53.1 , ≤ 7.53.1 (semver) Affected: 7.53.0 , ≤ 7.53.0 (semver) Affected: 7.52.1 , ≤ 7.52.1 (semver) Affected: 7.52.0 , ≤ 7.52.0 (semver) Affected: 7.51.0 , ≤ 7.51.0 (semver) Affected: 7.50.3 , ≤ 7.50.3 (semver) Affected: 7.50.2 , ≤ 7.50.2 (semver) Affected: 7.50.1 , ≤ 7.50.1 (semver) Affected: 7.50.0 , ≤ 7.50.0 (semver) Affected: 7.49.1 , ≤ 7.49.1 (semver) Affected: 7.49.0 , ≤ 7.49.0 (semver) Affected: 7.48.0 , ≤ 7.48.0 (semver) Affected: 7.47.1 , ≤ 7.47.1 (semver) Affected: 7.47.0 , ≤ 7.47.0 (semver) Affected: 7.46.0 , ≤ 7.46.0 (semver) Affected: 7.45.0 , ≤ 7.45.0 (semver) Affected: 7.44.0 , ≤ 7.44.0 (semver) Affected: 7.43.0 , ≤ 7.43.0 (semver) Affected: 7.42.1 , ≤ 7.42.1 (semver) Affected: 7.42.0 , ≤ 7.42.0 (semver) Affected: 7.41.0 , ≤ 7.41.0 (semver) Affected: 7.40.0 , ≤ 7.40.0 (semver) Affected: 7.39.0 , ≤ 7.39.0 (semver) Affected: 7.38.0 , ≤ 7.38.0 (semver) Affected: 7.37.1 , ≤ 7.37.1 (semver) Affected: 7.37.0 , ≤ 7.37.0 (semver) Affected: 7.36.0 , ≤ 7.36.0 (semver) Affected: 7.35.0 , ≤ 7.35.0 (semver) Affected: 7.34.0 , ≤ 7.34.0 (semver) Affected: 7.33.0 , ≤ 7.33.0 (semver)

Credits

anonymous237 on hackerone Daniel Stenberg

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-01-08T11:06:18.117Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/01/07/4"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14524",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-09T19:24:54.231955Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-02T13:20:16.344Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.17.0",
              "status": "affected",
              "version": "8.17.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.16.0",
              "status": "affected",
              "version": "8.16.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.15.0",
              "status": "affected",
              "version": "8.15.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.1",
              "status": "affected",
              "version": "8.14.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.0",
              "status": "affected",
              "version": "8.14.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.13.0",
              "status": "affected",
              "version": "8.13.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.1",
              "status": "affected",
              "version": "8.12.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.0",
              "status": "affected",
              "version": "8.12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.1",
              "status": "affected",
              "version": "8.11.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.0",
              "status": "affected",
              "version": "8.11.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.80.0",
              "status": "affected",
              "version": "7.80.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.1",
              "status": "affected",
              "version": "7.79.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.0",
              "status": "affected",
              "version": "7.79.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.78.0",
              "status": "affected",
              "version": "7.78.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.77.0",
              "status": "affected",
              "version": "7.77.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.1",
              "status": "affected",
              "version": "7.76.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.0",
              "status": "affected",
              "version": "7.76.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.75.0",
              "status": "affected",
              "version": "7.75.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.74.0",
              "status": "affected",
              "version": "7.74.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.73.0",
              "status": "affected",
              "version": "7.73.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.72.0",
              "status": "affected",
              "version": "7.72.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.71.1",
              "status": "affected",
              "version": "7.71.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.71.0",
              "status": "affected",
              "version": "7.71.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.70.0",
              "status": "affected",
              "version": "7.70.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.69.1",
              "status": "affected",
              "version": "7.69.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.69.0",
              "status": "affected",
              "version": "7.69.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.68.0",
              "status": "affected",
              "version": "7.68.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.67.0",
              "status": "affected",
              "version": "7.67.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.66.0",
              "status": "affected",
              "version": "7.66.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.3",
              "status": "affected",
              "version": "7.65.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.2",
              "status": "affected",
              "version": "7.65.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.1",
              "status": "affected",
              "version": "7.65.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.0",
              "status": "affected",
              "version": "7.65.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.64.1",
              "status": "affected",
              "version": "7.64.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.64.0",
              "status": "affected",
              "version": "7.64.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.63.0",
              "status": "affected",
              "version": "7.63.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.62.0",
              "status": "affected",
              "version": "7.62.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.61.1",
              "status": "affected",
              "version": "7.61.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.61.0",
              "status": "affected",
              "version": "7.61.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.60.0",
              "status": "affected",
              "version": "7.60.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.59.0",
              "status": "affected",
              "version": "7.59.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.58.0",
              "status": "affected",
              "version": "7.58.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.57.0",
              "status": "affected",
              "version": "7.57.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.56.1",
              "status": "affected",
              "version": "7.56.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.56.0",
              "status": "affected",
              "version": "7.56.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.55.1",
              "status": "affected",
              "version": "7.55.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.55.0",
              "status": "affected",
              "version": "7.55.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.54.1",
              "status": "affected",
              "version": "7.54.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.54.0",
              "status": "affected",
              "version": "7.54.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.53.1",
              "status": "affected",
              "version": "7.53.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.53.0",
              "status": "affected",
              "version": "7.53.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.52.1",
              "status": "affected",
              "version": "7.52.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.52.0",
              "status": "affected",
              "version": "7.52.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.51.0",
              "status": "affected",
              "version": "7.51.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.3",
              "status": "affected",
              "version": "7.50.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.2",
              "status": "affected",
              "version": "7.50.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.1",
              "status": "affected",
              "version": "7.50.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.0",
              "status": "affected",
              "version": "7.50.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.49.1",
              "status": "affected",
              "version": "7.49.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.49.0",
              "status": "affected",
              "version": "7.49.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.48.0",
              "status": "affected",
              "version": "7.48.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.47.1",
              "status": "affected",
              "version": "7.47.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.47.0",
              "status": "affected",
              "version": "7.47.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.46.0",
              "status": "affected",
              "version": "7.46.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.45.0",
              "status": "affected",
              "version": "7.45.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.44.0",
              "status": "affected",
              "version": "7.44.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.43.0",
              "status": "affected",
              "version": "7.43.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.42.1",
              "status": "affected",
              "version": "7.42.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.42.0",
              "status": "affected",
              "version": "7.42.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.41.0",
              "status": "affected",
              "version": "7.41.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.40.0",
              "status": "affected",
              "version": "7.40.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.39.0",
              "status": "affected",
              "version": "7.39.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.38.0",
              "status": "affected",
              "version": "7.38.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.37.1",
              "status": "affected",
              "version": "7.37.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.37.0",
              "status": "affected",
              "version": "7.37.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.36.0",
              "status": "affected",
              "version": "7.36.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.35.0",
              "status": "affected",
              "version": "7.35.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.34.0",
              "status": "affected",
              "version": "7.34.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.33.0",
              "status": "affected",
              "version": "7.33.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "anonymous237 on hackerone"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-08T10:07:25.655Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2025-14524.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2025-14524.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/3459417"
        }
      ],
      "title": "bearer token leak on cross-protocol redirect"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2025-14524",
    "datePublished": "2026-01-08T10:07:25.655Z",
    "dateReserved": "2025-12-11T08:04:14.328Z",
    "dateUpdated": "2026-04-02T13:20:16.344Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-55753 (GCVE-0-2025-55753)

Vulnerability from cvelistv5 – Published: 2025-12-05 10:12 – Updated: 2025-12-05 19:27

Title

Apache HTTP Server: mod_md (ACME), unintended retry intervals

Summary

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

apache

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/12/04/4

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.30 , < 2.4.66 (semver)

Credits

Aisle Research

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-12-05T11:05:52.628Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/12/04/4"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-55753",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T19:26:40.760698Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T19:27:31.842Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "2.4.66",
              "status": "affected",
              "version": "2.4.30",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Aisle Research"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eAn integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.\u003c/span\u003e\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.66, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds.\n\nThis issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.\n\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190 Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-05T10:12:22.041Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-08-15T10:58:00.000Z",
          "value": "reported"
        },
        {
          "lang": "en",
          "time": "2025-11-20T12:00:00.000Z",
          "value": "fixed by r1929884 in 2.4.x"
        }
      ],
      "title": "Apache HTTP Server: mod_md (ACME), unintended retry intervals",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-55753",
    "datePublished": "2025-12-05T10:12:22.041Z",
    "dateReserved": "2025-08-15T08:38:37.265Z",
    "dateUpdated": "2025-12-05T19:27:31.842Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-58098 (GCVE-0-2025-58098)

Vulnerability from cvelistv5 – Published: 2025-12-05 13:40 – Updated: 2026-02-26 16:57

Title

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

Summary

Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.

Severity

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

apache

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/12/04/5

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , < 2.4.66 (semver)

Credits

Anthony Parfenov (United Rentals, Inc.)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-12-05T14:05:34.041Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/12/04/5"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 8.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-58098",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-22T04:55:46.500021Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:30.146Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anthony Parfenov (United Rentals, Inc.)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eApache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd=\"...\" directives.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server before 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.66, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd=\"...\" directives.\n\nThis issue affects Apache HTTP Server before 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201 Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-05T13:40:39.772Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-08-21T00:00:00.000Z",
          "value": "Reported to security team"
        },
        {
          "lang": "en",
          "time": "2025-12-01T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1930165"
        }
      ],
      "title": "Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-58098",
    "datePublished": "2025-12-05T13:40:39.772Z",
    "dateReserved": "2025-08-22T18:38:51.070Z",
    "dateUpdated": "2026-02-26T16:57:30.146Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-59775 (GCVE-0-2025-59775)

Vulnerability from cvelistv5 – Published: 2025-12-05 10:17 – Updated: 2025-12-05 19:28

Title

Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

Summary

Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

apache

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/12/04/6

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.0 , ≤ 2.4.65 (semver)

Credits

Orange Tsai (@orange_8361) from DEVCORE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-12-05T11:05:59.532Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/12/04/6"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-59775",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T19:28:08.046980Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T19:28:44.631Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.65",
              "status": "affected",
              "version": "2.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Orange Tsai (@orange_8361) from DEVCORE"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\n\nServer-Side Request Forgery (SSRF) vulnerability \n\n\u0026nbsp;in Apache HTTP Server on Windows \n\nwith \u003cspan style=\"background-color: rgb(247, 247, 247);\"\u003eAllowEncodedSlashes\u003c/span\u003e \u003cspan style=\"background-color: rgb(247, 247, 247);\"\u003eOn\u003c/span\u003e\u0026nbsp;and \u003cspan style=\"background-color: rgb(247, 247, 247);\"\u003eMergeSlashes\u003c/span\u003e \u003cspan style=\"background-color: rgb(247, 247, 247);\"\u003eOff\u003c/span\u003e\u0026nbsp; allows to potentially leak NTLM \nhashes to a malicious server via SSRF and malicious requests or content\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.66, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Server-Side Request Forgery (SSRF) vulnerability \n\n\u00a0in Apache HTTP Server on Windows \n\nwith AllowEncodedSlashes On\u00a0and MergeSlashes Off\u00a0 allows to potentially leak NTLM \nhashes to a malicious server via SSRF and malicious requests or content\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-05T10:17:03.852Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-09-10T12:00:00.000Z",
          "value": "reported"
        },
        {
          "lang": "en",
          "time": "2025-12-01T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1930166"
        }
      ],
      "title": "Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-59775",
    "datePublished": "2025-12-05T10:17:03.852Z",
    "dateReserved": "2025-09-19T12:13:44.078Z",
    "dateUpdated": "2025-12-05T19:28:44.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-64505 (GCVE-0-2025-64505)

Vulnerability from cvelistv5 – Published: 2025-11-24 23:38 – Updated: 2025-11-25 18:55

Title

LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index

Summary

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/pnggroup/libpng/security/advis…	x_refsource_CONFIRM
https://github.com/pnggroup/libpng/pull/748	x_refsource_MISC
https://github.com/pnggroup/libpng/commit/6a528eb…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pnggroup	libpng	Affected: < 1.6.51

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-64505",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-11-25T18:55:44.084881Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-25T18:55:50.619Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "libpng",
          "vendor": "pnggroup",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.6.51"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0027s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-24T23:38:40.405Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42"
        },
        {
          "name": "https://github.com/pnggroup/libpng/pull/748",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pnggroup/libpng/pull/748"
        },
        {
          "name": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37"
        }
      ],
      "source": {
        "advisory": "GHSA-4952-h5wq-4m42",
        "discovery": "UNKNOWN"
      },
      "title": "LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-64505",
    "datePublished": "2025-11-24T23:38:40.405Z",
    "dateReserved": "2025-11-05T19:12:25.104Z",
    "dateUpdated": "2025-11-25T18:55:50.619Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-65082 (GCVE-0-2025-65082)

Vulnerability from cvelistv5 – Published: 2025-12-05 10:46 – Updated: 2025-12-05 19:30

Title

Apache HTTP Server: CGI environment variable override

Summary

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences

Assigner

apache

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/12/04/7

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.0 , ≤ 2.4.65 (semver)

Credits

Mattias Åsander (Umeå University)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-12-05T11:06:01.853Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/12/04/7"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-65082",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T19:29:40.311810Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T19:30:08.216Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.65",
              "status": "affected",
              "version": "2.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mattias \u00c5sander (Ume\u00e5 University)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server from 2.4.0 through 2.4.65.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.66 which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs.\n\nThis issue affects Apache HTTP Server from 2.4.0 through 2.4.65.\n\nUsers are recommended to upgrade to version 2.4.66 which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-150",
              "description": "CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-05T10:46:27.138Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-11-14T12:00:00.000Z",
          "value": "reported"
        },
        {
          "lang": "en",
          "time": "2025-12-01T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1930167"
        }
      ],
      "title": "Apache HTTP Server: CGI environment variable override",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-65082",
    "datePublished": "2025-12-05T10:46:27.138Z",
    "dateReserved": "2025-11-17T14:06:38.215Z",
    "dateUpdated": "2025-12-05T19:30:08.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-66200 (GCVE-0-2025-66200)

Vulnerability from cvelistv5 – Published: 2025-12-05 11:02 – Updated: 2025-12-05 17:38

Title

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

Summary

mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

mod_userdir+suexec bypass via AllowOverride FileInfo
CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

apache

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/12/04/8

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4.7 , ≤ 2.4.65 (semver)

Credits

Mattias Åsander (Umeå University)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-12-05T11:06:04.039Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/12/04/8"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-66200",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T17:38:10.452304Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-288",
                "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T17:38:36.682Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.65",
              "status": "affected",
              "version": "2.4.7",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mattias \u00c5sander (Ume\u00e5 University)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003emod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.66, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid.\n\nThis issue affects Apache HTTP Server: from 2.4.7 through 2.4.65.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "mod_userdir+suexec bypass via AllowOverride FileInfo",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-05T11:02:47.553Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-11-19T12:00:00.000Z",
          "value": "reported"
        },
        {
          "lang": "en",
          "time": "2025-12-01T12:00:00.000Z",
          "value": "fixed in 2.4.x by r1930168"
        }
      ],
      "title": "Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-66200",
    "datePublished": "2025-12-05T11:02:25.722Z",
    "dateReserved": "2025-11-24T15:58:10.254Z",
    "dateUpdated": "2025-12-05T17:38:36.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-20607 (GCVE-0-2026-20607)

Vulnerability from cvelistv5 – Published: 2026-03-25 00:31 – Updated: 2026-04-02 18:12

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access protected user data.

Severity

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

An app may be able to access protected user data
CWE-269 - Improper Privilege Management

Assigner

apple

References

3 references

URL	Tags
https://support.apple.com/en-us/126794
https://support.apple.com/en-us/126795
https://support.apple.com/en-us/126796

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 14.8.5 (custom) Affected: 0 , < 15.7.5 (custom) Affected: 0 , < 26.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20607",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-26T14:35:23.498342Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-26T14:36:03.879Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.7.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:12:22.817Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/126794"
        },
        {
          "url": "https://support.apple.com/en-us/126795"
        },
        {
          "url": "https://support.apple.com/en-us/126796"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-20607",
    "datePublished": "2026-03-25T00:31:50.881Z",
    "dateReserved": "2025-11-11T14:43:07.857Z",
    "dateUpdated": "2026-04-02T18:12:22.817Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-20631 (GCVE-0-2026-20631)

Vulnerability from cvelistv5 – Published: 2026-03-25 00:31 – Updated: 2026-04-02 18:10

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

A user may be able to elevate privileges
CWE-noinfo Not enough information

Assigner

apple

References

1 reference

URL	Tags
https://support.apple.com/en-us/126794

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 26.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20631",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-26T03:55:27.838004Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-26T13:18:00.578Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user may be able to elevate privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A user may be able to elevate privileges",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:10:00.223Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/126794"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-20631",
    "datePublished": "2026-03-25T00:31:42.395Z",
    "dateReserved": "2025-11-11T14:43:07.860Z",
    "dateUpdated": "2026-04-02T18:10:00.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-20632 (GCVE-0-2026-20632)

Vulnerability from cvelistv5 – Published: 2026-03-25 00:32 – Updated: 2026-04-07 22:50

Summary

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

An app may be able to access sensitive user data
CWE-284 - Improper Access Control

Assigner

apple

References

1 reference

URL	Tags
https://support.apple.com/en-us/126794

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 26.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20632",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-25T19:33:10.326376Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-25T19:33:33.572Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-07T22:50:19.210Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/126794"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-20632",
    "datePublished": "2026-03-25T00:32:48.006Z",
    "dateReserved": "2025-11-11T14:43:07.860Z",
    "dateUpdated": "2026-04-07T22:50:19.210Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-0853

CVE-2025-14524 (GCVE-0-2025-14524)

CVE-2025-55753 (GCVE-0-2025-55753)

CVE-2025-58098 (GCVE-0-2025-58098)

CVE-2025-59775 (GCVE-0-2025-59775)

CVE-2025-64505 (GCVE-0-2025-64505)

CVE-2025-65082 (GCVE-0-2025-65082)

CVE-2025-66200 (GCVE-0-2025-66200)

CVE-2026-20607 (GCVE-0-2026-20607)

CVE-2026-20631 (GCVE-0-2026-20631)

CVE-2026-20632 (GCVE-0-2026-20632)

Tags

Sightings

Nomenclature