Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 32.50%Aug 20, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.60%Jul 29, 2025
- Critical9.3An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility developed by Aexol Studio, in versions up to and including 2025.7.Check if you run itEPSS 2.35%Jul 3, 2025
- High7.8A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.Check if you run itEPSS 0.13%Jun 11, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- Medium5.5The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permCheck if you run itEPSS 0.21%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- Critical9.8This issue was addressed through improved state management.Check if you run itEPSS 0.30%May 29, 2025
- Medium5.5A permissions issue was addressed with additional sandbox restrictions.Check if you run itEPSS 0.18%May 29, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.18%May 29, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.48%May 29, 2025
- Medium4.6An authentication issue was addressed with improved state management.Check if you run itEPSS 0.25%May 29, 2025
- Medium5.5This issue was addressed with improved validation of symlinks.Check if you run itEPSS 0.22%May 29, 2025
- Critical9.1The issue was addressed with improved memory handling.Check if you run itEPSS 0.38%May 29, 2025
- High8.2A file quarantine bypass was addressed with additional checks.Check if you run itEPSS 0.19%May 29, 2025
- Medium4.8Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one.Check this weekEPSS 15.00%May 29, 2025
- Medium4.8On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Check if you run itEPSS 0.15%May 27, 2025
- Medium4.8MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle.Check this weekEPSS 18.00%May 22, 2025
- Medium4.3Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internCheck if you run itEPSS 0.24%May 21, 2025
- Medium5.5The issue was addressed with improved memory handling.Check this weekEPSS 19.00%May 19, 2025
- High8.8The issue was addressed with improved checks.Check this weekEPSS 75.00%May 19, 2025
- Medium5.5The issue was addressed with improved checks.Check this weekEPSS 16.00%May 19, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.17%May 19, 2025
- Low3.3A logic issue was addressed with improved checks.Check if you run itEPSS 0.18%May 19, 2025