CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- apple macosA memory corruption issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.9,...8.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6....5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- barracuda message archiver, message archiver firmware +1 morethe BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page...6.1 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6,...9.8 Critical
- apple ipados, macos, safari +30 more +32 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,...8.8 High
- apple macos, tvos, visionos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS...7.8 High
- apple ipados, macos +1 moreThis issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7...9.8 Critical
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macos, safari +1 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. A...6.2 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...7.1 High
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- apple macosAn injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS...5.5 Medium
- apple macosA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...9.1 Critical
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...8.8 High
- apple ipados, macos +1 moreA logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia...5.5 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6...9.1 Critical
- apple macos, safari +1 moreThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...6.1 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...6.5 Medium
- apple macosThis issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6...9.8 Critical
- apple ipados, macos +1 moreA use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in...9.8 Critical
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...6.2 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...9.8 Critical
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6,...9.8 Critical
- apple ipados, macos +1 moreA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...9.8 Critical
- apple macosAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...7.1 High
- apple ipados, macos, tvos +3 more +5 moreAn input validation issue was addressed with improved memory handling. This issue is fixed in...9.1 Critical
- apple macosA configuration issue was addressed with additional restrictions. This issue is fixed in macOS...9.8 Critical
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- apple macosThis issue was addressed by adding an additional prompt for user consent. This issue is fixed in...9.8 Critical
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6....5.5 Medium
- apple macosA privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS...4.4 Medium
- apple ipados, macos, tvos +4 more +6 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...7.5 High
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreWebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified6.9 Medium
- ni labviewMemory Corruption Issue in NI LabVIEW due to improper error handling8.5 High
- ni labviewMissing input check in lvpict.cpp used in NI LabVIEW8.5 High
- ni labviewCode Injection Vulnerability in NI LabVIEW when using CIN nodes8.5 High
- sonicwall sonicosUse of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows...9.8 Critical
- bugsinkBugsink is vulnerable to Path Traversal attacks via event_id in ingestion7.2 High
- mobyMoby's Firewalld reload removes bridge network isolation3.3 Low
- mobyMoby's Firewalld reload makes published container ports accessible from remote hosts5.1 Medium
- roxnor metform – contact form, survey, quiz, & custom form builder for elementorMetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element6.4 Medium
- enalean tuleapTuleap exposes artifacts to a mentioned user via email notifications4.3 Medium
- enalean tuleapTuleap is vulnerable to XSS attacks when displaying the children of a parent artifact5.4 Medium
- bentomlBentoML is Vulnerable to an SSRF Attack Through File Upload Processing9.9 Critical
- Show moreLoading…