Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
h a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01376.html
CVE ID: CVE-2025-31147 State: PUBLISHED Published: 2025-04-15T21:50:38.887Z Last Updated: 2025-04-16T15:07:42.292Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Growatt Products: Cloud portal Problem Types: CWE-639 Description: Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
CVE ID: CVE-2025-31160 State: PUBLISHED Published: 2025-03-26T00:00:00.000Z Last Updated: 2025-04-07T00:11:47.652Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: atop project Products: atop Problem Types: CWE-617 Description: atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rachelbythebay.com/w/2025/03/26/atop/ - https://news.ycombinator.com/item?id=43485980 - https://news.y
rences: - https://rachelbythebay.com/w/2025/03/26/atop/ - https://news.ycombinator.com/item?id=43485980 - https://news.ycombinator.com/item?id=43477057 - https://github.com/Atoptool/atop - https://blog.bismuth.sh/blog/bismuth-found-the-atop-bug
CVE ID: CVE-2025-31161 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-10-21T22:55:22.326Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CrushFTP Products: CrushFTP Problem Types: CWE-305 Description: CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as exploited in the wild in March and April 2025, aka "Unauthenticated HTTP(S) port access." A race condition exists in the AWS4-HMAC (compatible with S3) authorization method of the HTTP component of the FTP server. The server first verifies the existence of the user by performing
ation method of the HTTP component of the FTP server. The server first verifies the existence of the user by performing a call to login_user_pass() with no password requirement. This will authenticate the session through the HMAC verification process and up until the server checks for user verification once more. The vulnerability can be further stabilized, eliminating the need for successfully triggering a race condition, by sending a mangled AWS4-HMAC header. By providing only the username and a following slash (/), the server will successfully find a username, which triggers the successful anypass authentication process, but the server will fail to find the expected SignedHeaders entry, r
gers the successful anypass authentication process, but the server will fail to find the expected SignedHeaders entry, resulting in an index-out-of-bounds error that stops the code from reaching the session cleanup. Together, these issues make it trivial to authenticate as any known or guessable user (e.g., crushadmin), and can lead to a full compromise of the system by obtaining an administrative account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://outpost24.com/blog/crushftp-auth-bypass-vulnerability/ - https://crushftp.com/crush11wiki/Wiki.jsp?page=Update#section-Update-VulnerabilityInfo
CVE ID: CVE-2025-31162 State: PUBLISHED Published: 2025-03-28T18:01:31.662Z Last Updated: 2025-11-03T19:48:02.752Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: xfig Products: fig2dev Problem Types: CWE-369 Description: Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/185/
CVE ID: CVE-2025-31163 State: PUBLISHED Published: 2025-03-28T18:01:24.768Z Last Updated: 2025-11-03T19:48:04.200Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: xfig Products: fig2dev Problem Types: CWE-476 Description: Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/186/
CVE ID: CVE-2025-31164 State: PUBLISHED Published: 2025-03-28T18:01:16.666Z Last Updated: 2025-11-03T19:48:05.584Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: xfig Products: fig2dev Problem Types: CWE-122 Description: heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/184/
CVE ID: CVE-2025-31165 State: PUBLISHED Published: 2025-03-27T04:00:55.276Z Last Updated: 2025-03-28T03:58:34.636Z Vendors: FPT Software Products: NightWolf Penetration Platform Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the markdown editor feature. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bug.report.night-wolf.io/changelogs
CVE ID: CVE-2025-31170 State: PUBLISHED Published: 2025-04-07T03:50:03.929Z Last Updated: 2025-04-07T14:10:02.643Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2025-31171 State: PUBLISHED Published: 2025-04-07T03:52:28.713Z Last Updated: 2025-09-18T06:49:10.522Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-862 Description: File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/6/
CVE ID: CVE-2025-31172 State: PUBLISHED Published: 2025-04-07T03:54:03.796Z Last Updated: 2025-04-07T14:09:46.488Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-280 Description: Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2025-31173 State: PUBLISHED Published: 2025-04-07T03:56:19.969Z Last Updated: 2025-04-07T14:09:37.706Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-280 Description: Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2025-31174 State: PUBLISHED Published: 2025-04-07T03:57:08.372Z Last Updated: 2025-09-18T06:49:30.041Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-22 Description: Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2025-31175 State: PUBLISHED Published: 2025-04-07T03:58:22.031Z Last Updated: 2025-04-07T14:09:21.163Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-502 Description: Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2025-31176 State: PUBLISHED Published: 2025-03-27T15:06:20.163Z Last Updated: 2025-11-20T20:44:22.990Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-476 Description: A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-31176 - https://bugzilla.redhat.com/show_bug.cgi?id=2355343
CVE ID: CVE-2025-31177 State: PUBLISHED Published: 2025-05-07T20:55:21.714Z Last Updated: 2025-11-20T20:44:30.613Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-122 Description: gnuplot is affected by a heap buffer overflow at function utf8_copy_one. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-31177 - https://bugzilla.redhat.com/show_bug.cgi?id=2355342
CVE ID: CVE-2025-31178 State: PUBLISHED Published: 2025-03-27T15:06:38.451Z Last Updated: 2025-11-20T20:44:31.315Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-476 Description: A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-31178 - https://bugzilla.redhat.com/show_bug.cgi?id=2355341
CVE ID: CVE-2025-31179 State: PUBLISHED Published: 2025-03-27T15:08:36.013Z Last Updated: 2025-11-20T20:44:32.036Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-476 Description: A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-31179 - https://bugzilla.redhat.com/show_bug.cgi?id=2355340
CVE ID: CVE-2025-31180 State: PUBLISHED Published: 2025-03-27T15:08:48.575Z Last Updated: 2025-11-20T20:44:39.939Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-476 Description: A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-31180 - https://bugzilla.redhat.com/show_bug.cgi?id=2355339
CVE ID: CVE-2025-31181 State: PUBLISHED Published: 2025-03-27T15:09:02.725Z Last Updated: 2025-11-20T20:44:41.383Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-476 Description: A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-31181 - https://bugzilla.redhat.com/show_bug.cgi?id=2355338
CVE ID: CVE-2025-31182 State: PUBLISHED Published: 2025-03-31T22:22:56.605Z Last Updated: 2025-11-03T21:16:41.893Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, visionOS Problem Types: An app may be able to delete files for which it does not have permission Description: This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.ap
ISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31183 State: PUBLISHED Published: 2025-03-31T22:23:19.820Z Last Updated: 2025-11-03T21:16:47.455Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS Problem Types: An app may be able to access sensitive user data Description: The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support
ple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374
CVE ID: CVE-2025-31184 State: PUBLISHED Published: 2025-03-31T22:22:32.148Z Last Updated: 2025-11-03T21:16:53.091Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS, Safari Problem Types: An app may gain unauthorized access to Local Network Description: This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support
ple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122379
CVE ID: CVE-2025-31185 State: PUBLISHED Published: 2025-05-19T16:00:17.595Z Last Updated: 2025-05-19T16:49:53.681Z Vendors: Apple Products: iOS and iPadOS Problem Types: Photos in the Hidden Photos Album may be viewed without authentication Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3. Photos in the Hidden Photos Album may be viewed without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122066
CVE ID: CVE-2025-31187 State: PUBLISHED Published: 2025-03-31T22:24:14.853Z Last Updated: 2025-11-03T21:16:57.266Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31188 State: PUBLISHED Published: 2025-03-31T22:22:24.068Z Last Updated: 2025-11-03T21:17:01.790Z Vendors: Apple Products: macOS Problem Types: An app may be able to bypass Privacy preferences Description: A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31189 State: PUBLISHED Published: 2025-05-29T21:34:24.890Z Last Updated: 2025-05-30T22:02:59.622Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31191 State: PUBLISHED Published: 2025-03-31T22:24:10.313Z Last Updated: 2025-11-03T21:17:09.111Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://s
ort.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31192 State: PUBLISHED Published: 2025-03-31T22:22:30.090Z Last Updated: 2025-11-03T21:17:13.283Z Vendors: Apple Products: iOS and iPadOS, macOS, Safari Problem Types: A website may be able to access sensor information without user consent Description: The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122379
CVE ID: CVE-2025-31194 State: PUBLISHED Published: 2025-03-31T22:22:54.641Z Last Updated: 2025-11-03T21:17:17.468Z Vendors: Apple Products: macOS Problem Types: A Shortcut may run with admin privileges without authentication Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A Shortcut may run with admin privileges without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31195 State: PUBLISHED Published: 2025-05-12T21:42:42.658Z Last Updated: 2025-05-14T13:28:19.720Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122373
CVE ID: CVE-2025-31196 State: PUBLISHED Published: 2025-05-12T21:42:46.070Z Last Updated: 2025-11-03T19:48:12.588Z Vendors: Apple Products: iPadOS, macOS Problem Types: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122405 - https://support.a
CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122405 - https://support.apple.com/en-us/122717 - https://support.apple.com/en-us/122718
CVE ID: CVE-2025-31197 State: PUBLISHED Published: 2025-04-29T02:05:21.266Z Last Updated: 2025-04-30T15:40:44.431Z Vendors: Apple Products: tvOS, iOS and iPadOS, iPadOS, macOS, visionOS Problem Types: An attacker on the local network may cause an unexpected app termination Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122
tes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31198 State: PUBLISHED Published: 2025-05-29T21:34:25.428Z Last Updated: 2025-05-30T22:02:54.168Z Vendors: Apple Products: macOS Problem Types: A path handling issue was addressed with improved validation Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A path handling issue was addressed with improved validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-31199 State: PUBLISHED Published: 2025-05-29T21:34:26.147Z Last Updated: 2025-05-30T22:02:43.442Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS Problem Types: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378