Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple visionOSOut of bounds write in GPU on Mac

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple iOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability

Risk 65
Severity
6.1
Exploited
Zeroday
EPSS
1.04%
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Accessibility. An authorization issue was addressed with improved state management.

1 / 3
Source: Apple
First published (updated )
CVE-2025-24200

Apple macOS SonomaApple Multiple Products Improper Authentication Vulnerability

Risk 65
Severity
5.5
Exploited
Input Validation, Race Condition, Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Description: The issue was addressed with improved checks. WebKit Bugzilla: 272750

Versions affected: WebKitGTK and WPE WebKit before 2.44.2.

1 / 67
Source: Red Hat
First published (updated )
CVE-2024-27834

Apple macOS SonomaApple Multiple Products WebKit Type Confusion Vulnerability

Risk 86
Severity
8.8
Exploited
Zeroday
EPSS
0.11%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

Reference: https://webkitgtk.org/security/WSA-2024-0001.html

1 / 6
Source: Red Hat
First published (updated )
CVE-2024-23222

debian/libvpxHeap buffer overflow in vp8 encoding in libvpx

Risk 95
Severity
8.8
Exploited
Zeroday
EPSS
29.61%
Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

1 / 10
Source: Microsoft
First published (updated )
CVE-2023-5217

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203