Latest CVE Feed
-
5.5
MEDIUMCVE-2025-24214
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.... Read more
- Published: Mar. 31, 2025
- Modified: Apr. 07, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-24199
An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause a denial-of-service.... Read more
Affected Products : macos- Published: Mar. 31, 2025
- Modified: Apr. 07, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2021-32801
Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest functionality. It is recommended that the Nextc... Read more
- EPSS Score: %0.06
- Published: Sep. 07, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-24114
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Jan. 27, 2025
- Modified: Feb. 04, 2025
- Vuln Type: Authorization
-
5.5
MEDIUMCVE-2025-24091
An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.... Read more
- Published: Apr. 30, 2025
- Modified: May. 12, 2025
- Vuln Type: Authorization
-
5.5
MEDIUMCVE-2025-22012
In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu" There are reports that the pagetable walker cache coherency is not a given across the spectrum of SDM845/850 devices, le... Read more
Affected Products : linux_kernel- Published: Apr. 08, 2025
- Modified: Apr. 10, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2025-21933
In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When update_mmu_cache_range() is called by update_mmu_cache(), the vmf parameter is NULL, which will cause a NULL pointer dereference is... Read more
Affected Products : linux_kernel- Published: Apr. 01, 2025
- Modified: Apr. 10, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-21843
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthor_ioctl_dev_query() 'priorities_info' is uninitialized, and the uninitialized value is copied to user object when calling PANTHOR_UOBJ_SET(). U... Read more
Affected Products : linux_kernel- Published: Mar. 07, 2025
- Modified: Mar. 13, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-21774
In the Linux kernel, the following vulnerability has been resolved: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated Fix NULL pointer check in rkcanfd_handle_rx_fifo_overflow_int() to bail out if skb cannot be al... Read more
Affected Products : linux_kernel- Published: Feb. 27, 2025
- Modified: Mar. 05, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-21769
In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclock_miscdev_fops Without the .owner field, the module can be unloaded while /dev/vmclock0 is open, leading to an oops.... Read more
Affected Products : linux_kernel- Published: Feb. 27, 2025
- Modified: Mar. 05, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2025-21641
In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current->nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - ... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Jan. 19, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2025-21533
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the ... Read more
Affected Products : vm_virtualbox- Published: Jan. 21, 2025
- Modified: Jun. 23, 2025
- Vuln Type: Authentication
-
5.5
MEDIUMCVE-2021-31812
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.... Read more
- EPSS Score: %0.04
- Published: Jun. 12, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-21170
Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of... Read more
Affected Products : substance_3d_modeler- Published: Mar. 11, 2025
- Modified: Apr. 14, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2021-31191
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability... Read more
- EPSS Score: %0.40
- Published: May. 11, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-31184
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products- EPSS Score: %3.20
- Published: May. 11, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUM- EPSS Score: %19.00
- Published: May. 11, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2025-20213
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attack... Read more
Affected Products : catalyst_sd-wan_manager- Published: May. 07, 2025
- Modified: Aug. 04, 2025
- Vuln Type: Path Traversal
-
5.5
MEDIUMCVE-2021-30976
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.... Read more
- EPSS Score: %0.23
- Published: Aug. 24, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-30972
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences.... Read more
- EPSS Score: %0.06
- Published: Aug. 24, 2021
- Modified: Nov. 21, 2024