Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5An out-of-bounds read was addressed with improved bounds checking.Open the advisoryAug 29, 2025
- High7.8A permissions issue was addressed with additional restrictions.Open the advisoryAug 29, 2025
- Low3.3An out-of-bounds read was addressed with improved bounds checking.Open the advisoryAug 29, 2025
- High7.8This issue was addressed by removing the vulnerable code.Open the advisoryAug 29, 2025
- High7.3Local privilege escalation due to improper soft link handling.Open the advisoryAug 28, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 32.50%Aug 20, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityPatch nowKEVEPSS 13.48%Jul 30, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityPatch nowKEVEPSS 1.60%Jul 29, 2025
- Critical9.3An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility developed by Aexol Studio, in versions up to and including 2025.7.Check if you run itEPSS 2.35%Jul 3, 2025
- High8.8The executable file warning did not warn users before opening files with the extension.Check this weekEPSS 21.00%Jun 24, 2025
- High7.8A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.Check if you run itEPSS 0.13%Jun 11, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- High7.8The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which isCheck if you run itEPSS 0.14%Jun 10, 2025
- Medium5.5The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permCheck if you run itEPSS 0.21%Jun 10, 2025
- High7.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model.Check if you run itEPSS 0.16%Jun 10, 2025
- High7.5Denial of service due to improper handling of malformed input.Check if you run itEPSS 0.37%Jun 4, 2025
- Critical9.8This issue was addressed through improved state management.Check if you run itEPSS 0.30%May 29, 2025
- Medium5.5A permissions issue was addressed with additional sandbox restrictions.Check if you run itEPSS 0.18%May 29, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.18%May 29, 2025
- Medium5.5A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.48%May 29, 2025
- Medium4.6An authentication issue was addressed with improved state management.Check if you run itEPSS 0.25%May 29, 2025
- Medium5.5This issue was addressed with improved validation of symlinks.Check if you run itEPSS 0.22%May 29, 2025
- Critical9.1The issue was addressed with improved memory handling.Check if you run itEPSS 0.38%May 29, 2025
- High8.2A file quarantine bypass was addressed with additional checks.Check if you run itEPSS 0.19%May 29, 2025
- High7.5Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorizCheck if you run itEPSS 0.57%May 29, 2025