Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.2Apple Multiple Products Unspecified VulnerabilityKEVEPSS 1.2%Jun 11, 2025
- High7.8The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which isEPSS 0.1%Jun 10, 2025
- Medium5.5The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permEPSS 0.2%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.EPSS 0.2%Jun 10, 2025
- High7.5Denial of service due to improper handling of malformed input.EPSS 0.4%Jun 4, 2025
- Critical9.8This issue was addressed through improved state management.EPSS 0.3%May 29, 2025
- Medium5.5A permissions issue was addressed with additional sandbox restrictions.EPSS 0.2%May 29, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.EPSS 0.2%May 29, 2025
- Medium5.5A logging issue was addressed with improved data redaction.EPSS 0.5%May 29, 2025
- Medium4.6An authentication issue was addressed with improved state management.EPSS 0.3%May 29, 2025
- Medium5.5This issue was addressed with improved validation of symlinks.EPSS 0.2%May 29, 2025
- Critical9.1The issue was addressed with improved memory handling.EPSS 0.4%May 29, 2025
- High8.2A file quarantine bypass was addressed with additional checks.EPSS 0.2%May 29, 2025
- High7.5Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorizEPSS 0.6%May 29, 2025
- Medium4.8On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (EPSS 0.2%May 27, 2025
- Medium5.5The issue was addressed with improved memory handling.EPSS 19.0%May 19, 2025
- High8.8The issue was addressed with improved checks.EPSS 75.0%May 19, 2025
- Medium5.5The issue was addressed with improved checks.EPSS 16.0%May 19, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.EPSS 0.2%May 19, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsEPSS 0.6%May 14, 2025
- Medium5.2An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theEPSS 14.0%May 14, 2025
- Medium5.5A privacy issue was addressed by removing sensitive data.EPSS 0.2%May 12, 2025
- High7.8A permissions issue was addressed with additional restrictions.EPSS 21.0%May 12, 2025
- Medium5.5An information disclosure issue was addressed with improved privacy controls.EPSS 0.2%May 12, 2025
- High7.8An input validation issue was addressed by removing the vulnerable code.EPSS 25.0%May 12, 2025