CVE Database

114866+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-43312
5.5 MEDIUM

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app …

Sep 15, 2025
CVE-2025-43311
5.1 MEDIUM

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-43310
4.4 MEDIUM

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-43308
5.3 MEDIUM

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-43307
4.0 MEDIUM

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to …

Sep 15, 2025
CVE-2025-43305
5.5 MEDIUM

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app …

Sep 15, 2025
CVE-2025-43304
7.0 HIGH

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app …

Sep 15, 2025
CVE-2025-43303
5.5 MEDIUM

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS …

Sep 15, 2025
CVE-2025-43302
5.5 MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, …

Sep 15, 2025
CVE-2025-43301
3.3 LOW

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS …

Sep 15, 2025
CVE-2025-43299
5.5 MEDIUM

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS …

Sep 15, 2025
CVE-2025-43298
7.8 HIGH

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma …

Sep 15, 2025
CVE-2025-43297
6.2 MEDIUM

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause …

Sep 15, 2025
CVE-2025-43295
5.5 MEDIUM

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS …

Sep 15, 2025
CVE-2025-43294
3.3 LOW

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS …

Sep 15, 2025
CVE-2025-43293
5.5 MEDIUM

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-43292
5.5 MEDIUM

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sequoia 15.7.2, macOS Tahoe 26. An app …

Sep 15, 2025
CVE-2025-43291
5.5 MEDIUM

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An …

Sep 15, 2025
CVE-2025-43287
7.1 HIGH

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously crafted image may corrupt process memory.

Sep 15, 2025
CVE-2025-43286
7.8 HIGH

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-43285
5.5 MEDIUM

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-43283
3.3 LOW

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected …

Sep 15, 2025
CVE-2025-43279
6.2 MEDIUM

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26. An app may be …

Sep 15, 2025
CVE-2025-43272
6.5 MEDIUM

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, …

Sep 15, 2025
CVE-2025-43263
7.1 HIGH

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside …

Sep 15, 2025
CVE-2025-43262
5.1 MEDIUM

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories …

Sep 15, 2025
CVE-2025-43231
5.5 MEDIUM

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data.

Sep 15, 2025
CVE-2025-43208
5.5 MEDIUM

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location …

Sep 15, 2025
CVE-2025-43207
5.5 MEDIUM

This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data.

Sep 15, 2025
CVE-2025-43204
7.8 HIGH

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out …

Sep 15, 2025
CVE-2025-43203
4.0 MEDIUM

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An …

Sep 15, 2025
CVE-2025-43190
5.5 MEDIUM

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, …

Sep 15, 2025
CVE-2025-31271
7.5 HIGH

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on …

Sep 15, 2025
CVE-2025-31270
5.5 MEDIUM

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user …

Sep 15, 2025
CVE-2025-31269
5.5 MEDIUM

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to …

Sep 15, 2025
CVE-2025-31268
5.5 MEDIUM

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-31255
9.8 CRITICAL

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, …

Sep 15, 2025
CVE-2025-31254
5.4 MEDIUM

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content …

Sep 15, 2025
CVE-2025-30468
6.5 MEDIUM

This issue was addressed through improved state management. This issue is fixed in iOS 26 and iPadOS 26. Private Browsing tabs may be accessed without …

Sep 15, 2025
CVE-2025-24197
5.5 MEDIUM

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may …

Sep 15, 2025
CVE-2025-24133

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Sep 15, 2025
CVE-2025-24088
7.5 HIGH

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings …

Sep 15, 2025
CVE-2025-10485
4.3 MEDIUM

A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function ppt_log of the file /login of the …

Sep 15, 2025
CVE-2025-10483
6.3 MEDIUM

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/save_user.php. …

Sep 15, 2025
CVE-2025-6999

An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform …

Sep 15, 2025
CVE-2025-6947

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the SIP Proxy module. …

Sep 15, 2025
CVE-2025-57118
9.8 CRITICAL

An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php

Sep 15, 2025
CVE-2025-57117
5.4 MEDIUM

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting …

Sep 15, 2025
CVE-2025-56274
8.1 HIGH

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as admin) sessions …

Sep 15, 2025
CVE-2025-43802
6.1 MEDIUM

Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/<object-name> API endpoint in Liferay Portal 7.4.3.51 through 7.4.3.109, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 …

Sep 15, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.