Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30400 State: PUBLISHED Published: 2025-05-13T16:58:49.601Z Last Updated: 2025-10-21T22:55:15.798Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-416 Description: Use after free in Windows DWM allows an
indows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-416 Description: Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30400
CVE ID: CVE-2025-30401 State: PUBLISHED Published: 2025-04-05T11:47:54.836Z Last Updated: 2025-04-09T17:19:56.351Z Vendors: Facebook Products: WhatsApp Desktop for Windows Problem Types: CWE-430 Description: A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler based on the attachment’s filename extension. A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp. We have not seen evidence of exploitation in the wild. Additional Analyst Notes: - CISA ADP Vulnrichm
t inside WhatsApp. We have not seen evidence of exploitation in the wild. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2025-30401 - https://www.whatsapp.com/security/advisories/2025/
CVE ID: CVE-2025-30402 State: PUBLISHED Published: 2025-07-11T17:39:26.646Z Last Updated: 2025-07-11T18:31:13.286Z Vendors: Meta Platforms, Inc Products: ExecuTorch Problem Types: Heap-based Buffer Overflow (CWE-122) Description: A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2025-30402 - https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e
om/security/advisories/cve-2025-30402 - https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f
CVE ID: CVE-2025-30403 State: PUBLISHED Published: 2025-07-11T18:26:51.212Z Last Updated: 2025-07-11T19:23:37.185Z Vendors: Facebook Products: mvfst Problem Types: Heap-based Buffer Overflow (CWE-122) Description: A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2025-30403 - https://github.com/facebook/mvfst/commit/65b297332191de6e867c4a3139a233fc84c0e7e0
CVE ID: CVE-2025-30404 State: PUBLISHED Published: 2025-08-07T22:46:57.161Z Last Updated: 2025-08-12T14:11:13.423Z Vendors: Meta Platforms, Inc Products: ExecuTorch Problem Types: Integer Overflow or Wraparound (CWE-190) Description: An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2025-30404 - https://github.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054
ok.com/security/advisories/cve-2025-30404 - https://github.com/pytorch/executorch/commit/d158236b1dc84539c1b16843bc74054c9dcba006
CVE ID: CVE-2025-30405 State: PUBLISHED Published: 2025-08-07T22:55:40.262Z Last Updated: 2025-08-12T14:12:22.703Z Vendors: Meta Platforms, Inc Products: ExecuTorch Problem Types: Integer Overflow or Wraparound (CWE-190) Description: An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2025-30405 - https://github.com/pytorch/executorch/commi
References: - https://www.facebook.com/security/advisories/cve-2025-30405 - https://github.com/pytorch/executorch/commit/0830af8207240df8d7f35b984cdf8bc35d74fa73
CVE ID: CVE-2025-30406 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-10-21T22:55:22.155Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Gladinet Products: CentreStack Problem Types: CWE-321 Description: Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: a CentreStack admin can manually delete the machineKey defined in portal\web.con
to achieve remote code execution. NOTE: a CentreStack admin can manually delete the machineKey defined in portal\web.config. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.centrestack.com/p/gce_latest_release.html - https://gladinetsupport.s3.us-east-1.amazonaws.com/gladinet/securityadvisory-cve-2005.pdf
CVE ID: CVE-2025-30407 State: PUBLISHED Published: 2025-03-26T21:32:30.085Z Last Updated: 2025-04-24T03:55:18.669Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent Problem Types: CWE-426 Description: Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39713. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-8414
CVE ID: CVE-2025-30408 State: PUBLISHED Published: 2025-04-24T13:04:26.690Z Last Updated: 2025-06-04T13:27:16.195Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent, Acronis Cyber Protect 16 Problem Types: CWE-732 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39904, Acronis Cyber Protect 16 (Windows) before build 39938. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-8035
CVE ID: CVE-2025-30409 State: PUBLISHED Published: 2025-04-24T13:04:41.220Z Last Updated: 2025-04-24T13:47:17.849Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent Problem Types: CWE-770 Description: Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39904. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-8148
CVE ID: CVE-2025-30415 State: PUBLISHED Published: 2025-06-04T12:02:21.200Z Last Updated: 2025-06-04T13:10:54.369Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent Problem Types: CWE-1286 Description: Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-8646
CVE ID: CVE-2025-30417 State: PUBLISHED Published: 2025-05-15T16:18:53.901Z Last Updated: 2025-05-15T18:38:35.883Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NI Products: Circuit Design Suite Problem Types: CWE-787 Description: There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst
lly crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-ni-circuit-design-suite.html
CVE ID: CVE-2025-30418 State: PUBLISHED Published: 2025-05-15T16:25:18.536Z Last Updated: 2025-05-15T18:38:13.079Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NI Products: Circuit Design Suite Problem Types: CWE-787 Description: There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst Notes: - CI
.sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-ni-circuit-design-suite.html
CVE ID: CVE-2025-30419 State: PUBLISHED Published: 2025-05-15T16:27:44.419Z Last Updated: 2025-05-15T20:03:00.208Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NI Products: Circuit Design Suite Problem Types: CWE-125 Description: There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analys
ially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-ni-circuit-design-suite.html
CVE ID: CVE-2025-30420 State: PUBLISHED Published: 2025-05-15T16:29:39.374Z Last Updated: 2025-05-15T20:00:47.804Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NI Products: Circuit Design Suite Problem Types: CWE-125 Description: There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst N
ly crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-ni-circuit-design-suite.html
CVE ID: CVE-2025-30421 State: PUBLISHED Published: 2025-05-15T16:32:33.387Z Last Updated: 2025-05-15T19:37:17.920Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NI Products: Circuit Design Suite Problem Types: CWE-121 Description: There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Ad
to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-ni-circuit-design-suite.html
CVE ID: CVE-2025-30422 State: PUBLISHED Published: 2025-04-30T20:48:15.738Z Last Updated: 2025-05-01T13:09:41.671Z Vendors: Apple Products: AirPlay audio SDK, AirPlay video SDK, CarPlay Communication Plug-in Problem Types: An attacker on the local network may cause an unexpected app termination Description: A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122403
CVE ID: CVE-2025-30424 State: PUBLISHED Published: 2025-03-31T22:22:26.067Z Last Updated: 2025-11-03T21:13:32.589Z Vendors: Apple Products: macOS Problem Types: Deleting a conversation in Messages may expose user contact information in system logging Description: A logging issue was addressed with improved data redaction. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Deleting a conversation in Messages may expose user contact information in system logging. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122374 - https://support.apple.com/e
CVE ID: CVE-2025-30425 State: PUBLISHED Published: 2025-03-31T22:22:50.104Z Last Updated: 2025-11-03T21:13:39.552Z Vendors: Apple Products: tvOS, iOS and iPadOS, iPadOS, macOS, Safari Problem Types: A malicious website may be able to track users in Safari private browsing mode Description: This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-u
richment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122379
CVE ID: CVE-2025-30426 State: PUBLISHED Published: 2025-03-31T22:23:55.589Z Last Updated: 2025-11-03T21:13:46.624Z Vendors: Apple Products: tvOS, iOS and iPadOS, iPadOS, macOS, visionOS Problem Types: An app may be able to enumerate a user's installed apps Description: This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user's installed apps. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us
ces: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378
CVE ID: CVE-2025-30427 State: PUBLISHED Published: 2025-03-31T22:24:24.350Z Last Updated: 2025-11-03T21:13:55.087Z Vendors: Apple Products: tvOS, iOS and iPadOS, iPadOS, macOS, visionOS, Safari Problem Types: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122379
CVE ID: CVE-2025-30428 State: PUBLISHED Published: 2025-03-31T22:22:34.013Z Last Updated: 2025-11-03T21:13:57.909Z Vendors: Apple Products: iOS and iPadOS, iPadOS Problem Types: Photos in the Hidden Photos Album may be viewed without authentication Description: This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372
CVE ID: CVE-2025-30429 State: PUBLISHED Published: 2025-03-31T22:22:41.739Z Last Updated: 2025-11-03T21:14:07.973Z Vendors: Apple Products: tvOS, iOS and iPadOS, iPadOS, macOS, visionOS Problem Types: An app may be able to break out of its sandbox Description: A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https
Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-30430 State: PUBLISHED Published: 2025-03-31T22:23:50.933Z Last Updated: 2025-11-03T21:14:12.136Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS Problem Types: Password autofill may fill in passwords after failing authentication Description: This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378
CVE ID: CVE-2025-30432 State: PUBLISHED Published: 2025-03-31T22:22:28.969Z Last Updated: 2025-11-03T21:14:20.515Z Vendors: Apple Products: tvOS, iOS and iPadOS, iPadOS, visionOS, macOS Problem Types: A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures Description: A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures. Additional Analyst Notes: -
sscode entries on a locked device and thereby cause escalating time delays after 4 failures. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-30433 State: PUBLISHED Published: 2025-03-31T22:22:47.415Z Last Updated: 2025-11-03T21:14:28.934Z Vendors: Apple Products: iOS and iPadOS, iPadOS, macOS, visionOS Problem Types: A shortcut may be able to access files that are normally inaccessible to the Shortcuts app Description: This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.ap
rtcuts app. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122372 - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/122378 - https://support.apple.com/en-us/122374 - https://support.apple.com/en-us/122375
CVE ID: CVE-2025-30434 State: PUBLISHED Published: 2025-03-31T22:23:06.874Z Last Updated: 2025-11-03T21:14:30.322Z Vendors: Apple Products: iOS and iPadOS Problem Types: Processing a maliciously crafted file may lead to a cross site scripting attack Description: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122371
CVE ID: CVE-2025-30435 State: PUBLISHED Published: 2025-03-31T22:23:07.795Z Last Updated: 2025-11-03T21:14:31.883Z Vendors: Apple Products: macOS Problem Types: A sandboxed app may be able to access sensitive user data in system logs Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122373
CVE ID: CVE-2025-30436 State: PUBLISHED Published: 2025-05-12T21:42:46.888Z Last Updated: 2025-05-14T16:18:29.443Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker may be able to use Siri to enable Auto-Answer Calls Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122371