Category: Vulnerability
-
FreeBSD security vulnerability (CVE-2025-0373)
CVE-2025-0373 is a security vulnerability identified in certain filesystems of FreeBSD operating systems. Specifically, on 64-bit systems, the function VOP_VPTOFH() in the cd9660, tarfs, and ext2fs filesystems contains a stack buffer overflow that overflows the destination FID buffer by 4 bytes. This vulnerability can be exploited when an NFS server exports one of these affected…
-
Apple zero-day vulnerability (CVE-2025-24085)
CVE-2025-24085 is a zero-day vulnerability that arises from a “use after free” issue in Apple’s CoreMedia framework. This flaw affects multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. This vulnerability occurs when memory that has already been freed is improperly accessed, potentially leading to arbitrary code execution or privilege escalation. Apple…
-
Amazon WorkSpaces security vulnerability (CVE-2025-0501)
CVE-2025-0501 is a security vulnerability affecting native Amazon WorkSpaces clients that use the PCoIP protocol. The flaw is rooted in improper certificate validation (CWE-295), which can allow an attacker to conduct a man‑in‑the‑middle (MITM) attack. If exploited, an adversary may intercept or manipulate remote WorkSpaces sessions, thereby gaining unauthorized access. Affected Versions: The vulnerability has…
-
Amazon WorkSpaces, AppStream 2.0 and DCV security vulnerability (CVE-2025-0500)
CVE-2025-0500 is a security vulnerability identified in specific versions of native clients for Amazon WorkSpaces (using the Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV. This flaw could allow an attacker to perform a man-in-the-middle (MITM) attack, potentially granting unauthorized access to remote sessions. Affected Versions: Amazon has addressed this vulnerability in subsequent releases.…
-
Fortinet FortiManager security vulnerability (CVE-2024-48889)
CVE-2024-48889 is an OS Command Injection vulnerability (CWE-78) identified in Fortinet’s FortiManager and FortiManager Cloud products. This flaw allows an authenticated remote attacker to execute unauthorized code or commands by sending specially crafted FGFM (FortiGate to FortiManager) requests. Affected Versions: Additionally, older FortiAnalyzer models (1000E, 1000F, 2000E, 3000E, 3000F, 3000G, 3500E, 3500F, 3500G, 3700F, 3700G,…
-
Apple zero-day vulnerability (CVE-2024-44309)
CVE-2024-44309 is a zero-day vulnerability addressed in Apple products, including Safari, iOS, iPadOS, macOS, and visionOS. Exploiting this flaw by processing maliciously crafted web content may lead to a cross-site scripting (XSS) attack. It has been actively exploited on Intel-based Mac systems. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS…
-
Apple zero-day vulnerability (CVE-2024-44308)
CVE-2024-44308 is a zero-day vulnerability addressed in Apple products, including Safari, iOS, iPadOS, macOS, and visionOS. Exploiting this flaw by processing maliciously crafted web content could lead to arbitrary code execution. It has been actively exploited on Intel-based Mac systems. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1,…
-
Critical Vulnerabilities of Blockchain AI (B-AI)
The fusion of blockchain and artificial intelligence (AI) has opened new frontiers in technology. At its core, Blockchain AI can be defined as the convergence of two powerful technologies: a shared, immutable ledger that provides a transparent and tamper-resistant record of transactions, and AI systems that analyze data and make decisions based on complex machine-learning…
-
Apple security vulnerability (CVE-2024-44215)
CVE-2024-44215 is a vulnerability in Apple’s ImageIO component. It allows unauthorized disclosure of memory contents through crafted image files, which could expose sensitive information if exploited. This flaw affects multiple Apple platforms, including macOS, iOS, iPadOS, and watchOS. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1,…
-
Apple macOS security vulnerability (CVE-2024-44208)
CVE-2024-44208 is a vulnerability affecting macOS versions before Sequoia 15. This flaw, identified in Apple’s operating system, allows applications to bypass certain privacy preferences due to improper state management. The vulnerability could enable unauthorized apps to access restricted information, potentially compromising user privacy. Apple addressed this issue with improved state management in macOS Sequoia 15,…
-
Apple macOS security vulnerability (CVE-2024-44213)
CVE-2024-44213 is a vulnerability that affected macOS versions before Ventura 13.7 and Sonoma 14.7. This issue, related to URLs parsing, allowed attackers in a privileged network position to potentially leak sensitive user information. Apple addressed this by enhancing input validation, and the fix is applied in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. See more…
-
Apple macOS security vulnerability (CVE-2024-44216)
CVE-2024-44216 is a vulnerability found in macOS, related to an access control weakness in the system’s sandbox mechanism. In macOS, the sandbox is designed to limit access of applications to resources and sensitive data, isolating each app to protect user information. However, in this case, the vulnerability could allow a malicious app to bypass these…