Vulnerability-Lookup

CVE-2024-9681 (GCVE-0-2024-9681)

Vulnerability from cvelistv5 – Published: 2024-11-06 07:47 – Updated: 2025-11-03 20:56

Title

HSTS subdomain overwrites parent cache entry

Summary

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.) When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1025 Comparison Using Wrong Factors

Assigner

curl

References

13 references

URL	Tags
https://curl.se/docs/CVE-2024-9681.json
https://curl.se/docs/CVE-2024-9681.html
https://hackerone.com/reports/2764830
http://www.openwall.com/lists/oss-security/2024/11/06/2
https://security.netapp.com/advisory/ntap-2024121…
http://seclists.org/fulldisclosure/2025/Apr/13
http://seclists.org/fulldisclosure/2025/Apr/10
http://seclists.org/fulldisclosure/2025/Apr/9
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Apr/5
http://seclists.org/fulldisclosure/2025/Apr/4
http://seclists.org/fulldisclosure/2025/Apr/12
http://seclists.org/fulldisclosure/2025/Apr/11

Impacted products

2 products

Vendor	Product	Version
curl	curl	Affected: 8.10.1 , ≤ 8.10.1 (semver) Affected: 8.10.0 , ≤ 8.10.0 (semver) Affected: 8.9.1 , ≤ 8.9.1 (semver) Affected: 8.9.0 , ≤ 8.9.0 (semver) Affected: 8.8.0 , ≤ 8.8.0 (semver) Affected: 8.7.1 , ≤ 8.7.1 (semver) Affected: 8.7.0 , ≤ 8.7.0 (semver) Affected: 8.6.0 , ≤ 8.6.0 (semver) Affected: 8.5.0 , ≤ 8.5.0 (semver) Affected: 8.4.0 , ≤ 8.4.0 (semver) Affected: 8.3.0 , ≤ 8.3.0 (semver) Affected: 8.2.1 , ≤ 8.2.1 (semver) Affected: 8.2.0 , ≤ 8.2.0 (semver) Affected: 8.1.2 , ≤ 8.1.2 (semver) Affected: 8.1.1 , ≤ 8.1.1 (semver) Affected: 8.1.0 , ≤ 8.1.0 (semver) Affected: 8.0.1 , ≤ 8.0.1 (semver) Affected: 8.0.0 , ≤ 8.0.0 (semver) Affected: 7.88.1 , ≤ 7.88.1 (semver) Affected: 7.88.0 , ≤ 7.88.0 (semver) Affected: 7.87.0 , ≤ 7.87.0 (semver) Affected: 7.86.0 , ≤ 7.86.0 (semver) Affected: 7.85.0 , ≤ 7.85.0 (semver) Affected: 7.84.0 , ≤ 7.84.0 (semver) Affected: 7.83.1 , ≤ 7.83.1 (semver) Affected: 7.83.0 , ≤ 7.83.0 (semver) Affected: 7.82.0 , ≤ 7.82.0 (semver) Affected: 7.81.0 , ≤ 7.81.0 (semver) Affected: 7.80.0 , ≤ 7.80.0 (semver) Affected: 7.79.1 , ≤ 7.79.1 (semver) Affected: 7.79.0 , ≤ 7.79.0 (semver) Affected: 7.78.0 , ≤ 7.78.0 (semver) Affected: 7.77.0 , ≤ 7.77.0 (semver) Affected: 7.76.1 , ≤ 7.76.1 (semver) Affected: 7.76.0 , ≤ 7.76.0 (semver) Affected: 7.75.0 , ≤ 7.75.0 (semver) Affected: 7.74.0 , ≤ 7.74.0 (semver)
curl	curl	Unaffected: 0 , < 7.74.0 (semver) Affected: 7.74.0 , ≤ 8.10.1 (semver) Unaffected: 8.11.0 , < * (semver) cpe:2.3:a:curl:curl::::::::

Credits

newfunction Daniel Stenberg

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:56:39.087Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/11/06/2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241213-0006/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "curl",
            "vendor": "curl",
            "versions": [
              {
                "lessThan": "7.74.0",
                "status": "unaffected",
                "version": "0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "8.10.1",
                "status": "affected",
                "version": "7.74.0",
                "versionType": "semver"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8.11.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T16:16:59.652768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:09:00.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.80.0",
              "status": "affected",
              "version": "7.80.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.1",
              "status": "affected",
              "version": "7.79.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.0",
              "status": "affected",
              "version": "7.79.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.78.0",
              "status": "affected",
              "version": "7.78.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.77.0",
              "status": "affected",
              "version": "7.77.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.1",
              "status": "affected",
              "version": "7.76.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.0",
              "status": "affected",
              "version": "7.76.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.75.0",
              "status": "affected",
              "version": "7.75.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.74.0",
              "status": "affected",
              "version": "7.74.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "newfunction"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl\u0027s HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1025 Comparison Using Wrong Factors",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T07:47:20.162Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2024-9681.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2024-9681.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/2764830"
        }
      ],
      "title": "HSTS subdomain overwrites parent cache entry"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2024-9681",
    "datePublished": "2024-11-06T07:47:20.162Z",
    "dateReserved": "2024-10-09T07:57:47.318Z",
    "dateUpdated": "2025-11-03T20:56:39.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-9681",
      "date": "2026-07-20",
      "epss": "0.0197",
      "percentile": "0.78222"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"7.74.0\", \"versionEndExcluding\": \"8.11.0\", \"matchCriteriaId\": \"D26CBA59-021E-46CB-A1A0-5AD682F6685E\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"When curl is asked to use HSTS, the expiry time for a subdomain might\\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\\notherwise intended.\\n\\nThis affects curl using applications that enable HSTS and use URLs with the\\ninsecure `HTTP://` scheme and perform transfers with hosts like\\n`x.example.com` as well as `example.com` where the first host is a subdomain\\nof the second host.\\n\\n(The HSTS cache either needs to have been populated manually or there needs to\\nhave been previous HTTPS accesses done as the cache needs to have entries for\\nthe domains involved to trigger this problem.)\\n\\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\\nparent domain `example.com` in curl\u0027s HSTS cache.\\n\\nThe result of a triggered bug is that HTTP accesses to `example.com` get\\nconverted to HTTPS for a different period of time than what was asked for by\\nthe origin server. If `example.com` for example stops supporting HTTPS at its\\nexpiry time, curl might then fail to access `http://example.com` until the\\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\\nthan otherwise intended.\"}, {\"lang\": \"es\", \"value\": \"Cuando se le pide a curl que use HSTS, el tiempo de expiraci\\u00f3n de un subdominio puede sobrescribir la entrada de cach\\u00e9 de un dominio principal, lo que hace que finalice antes o despu\\u00e9s de lo previsto. Esto afecta a curl que usa aplicaciones que habilitan HSTS y usan URL con el esquema inseguro `HTTP://` y realizan transferencias con hosts como `x.example.com` as\\u00ed como `example.com` donde el primer host es un subdominio del segundo host. (El cach\\u00e9 HSTS debe haberse llenado manualmente o debe haber habido accesos HTTPS previos ya que el cach\\u00e9 debe tener entradas para los dominios involucrados para activar este problema). Cuando `x.example.com` responde con encabezados `Strict-Transport-Security:`, este error puede hacer que el tiempo de expiraci\\u00f3n del subdominio *se extienda* y se configure para el dominio principal `example.com` en el cach\\u00e9 HSTS de curl. El resultado de un error activado es que los accesos HTTP a `example.com` se convierten a HTTPS durante un per\\u00edodo de tiempo diferente al solicitado por el servidor de origen. Si `example.com`, por ejemplo, deja de admitir HTTPS en su momento de vencimiento, curl podr\\u00eda entonces no poder acceder a `http://example.com` hasta que expire el tiempo de espera (configurado incorrectamente). Este error tambi\\u00e9n puede hacer que la entrada principal expire *antes*, lo que hace que curl vuelva inadvertidamente a HTTP inseguro antes de lo previsto.\"}]",
      "id": "CVE-2024-9681",
      "lastModified": "2024-12-13T14:15:22.953",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 4.2}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 5.9, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 3.6}]}",
      "published": "2024-11-06T08:15:03.740",
      "references": "[{\"url\": \"https://curl.se/docs/CVE-2024-9681.html\", \"source\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://curl.se/docs/CVE-2024-9681.json\", \"source\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://hackerone.com/reports/2764830\", \"source\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/11/06/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20241213-0006/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-697\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-21T01:17:56.000Z",
      "cve": "CVE-2024-9681",
      "id": "msrc_CVE-2024-9681",
      "initial_release_date": "2024-11-02T00:00:00.000Z",
      "product_status:fixed": "15",
      "product_status:known_affected": "15",
      "product_status:known_not_affected": "4",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "HSTS subdomain overwrites parent cache entry",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-9681.json",
      "version": "7"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-9681\",\"sourceIdentifier\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"published\":\"2024-11-06T08:15:03.740\",\"lastModified\":\"2026-06-17T08:25:03.177\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When curl is asked to use HSTS, the expiry time for a subdomain might\\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\\notherwise intended.\\n\\nThis affects curl using applications that enable HSTS and use URLs with the\\ninsecure `HTTP://` scheme and perform transfers with hosts like\\n`x.example.com` as well as `example.com` where the first host is a subdomain\\nof the second host.\\n\\n(The HSTS cache either needs to have been populated manually or there needs to\\nhave been previous HTTPS accesses done as the cache needs to have entries for\\nthe domains involved to trigger this problem.)\\n\\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\\nparent domain `example.com` in curl\u0027s HSTS cache.\\n\\nThe result of a triggered bug is that HTTP accesses to `example.com` get\\nconverted to HTTPS for a different period of time than what was asked for by\\nthe origin server. If `example.com` for example stops supporting HTTPS at its\\nexpiry time, curl might then fail to access `http://example.com` until the\\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\\nthan otherwise intended.\"},{\"lang\":\"es\",\"value\":\"Cuando se le pide a curl que use HSTS, el tiempo de expiraci\u00f3n de un subdominio puede sobrescribir la entrada de cach\u00e9 de un dominio principal, lo que hace que finalice antes o despu\u00e9s de lo previsto. Esto afecta a curl que usa aplicaciones que habilitan HSTS y usan URL con el esquema inseguro `HTTP://` y realizan transferencias con hosts como `x.example.com` as\u00ed como `example.com` donde el primer host es un subdominio del segundo host. (El cach\u00e9 HSTS debe haberse llenado manualmente o debe haber habido accesos HTTPS previos ya que el cach\u00e9 debe tener entradas para los dominios involucrados para activar este problema). Cuando `x.example.com` responde con encabezados `Strict-Transport-Security:`, este error puede hacer que el tiempo de expiraci\u00f3n del subdominio *se extienda* y se configure para el dominio principal `example.com` en el cach\u00e9 HSTS de curl. El resultado de un error activado es que los accesos HTTP a `example.com` se convierten a HTTPS durante un per\u00edodo de tiempo diferente al solicitado por el servidor de origen. Si `example.com`, por ejemplo, deja de admitir HTTPS en su momento de vencimiento, curl podr\u00eda entonces no poder acceder a `http://example.com` hasta que expire el tiempo de espera (configurado incorrectamente). Este error tambi\u00e9n puede hacer que la entrada principal expire *antes*, lo que hace que curl vuelva inadvertidamente a HTTP inseguro antes de lo previsto.\"}],\"affected\":[{\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"affectedData\":[{\"vendor\":\"curl\",\"product\":\"curl\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"8.10.1\",\"lessThanOrEqual\":\"8.10.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.10.0\",\"lessThanOrEqual\":\"8.10.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.9.1\",\"lessThanOrEqual\":\"8.9.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.9.0\",\"lessThanOrEqual\":\"8.9.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.8.0\",\"lessThanOrEqual\":\"8.8.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.7.1\",\"lessThanOrEqual\":\"8.7.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.7.0\",\"lessThanOrEqual\":\"8.7.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.6.0\",\"lessThanOrEqual\":\"8.6.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.5.0\",\"lessThanOrEqual\":\"8.5.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.4.0\",\"lessThanOrEqual\":\"8.4.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.3.0\",\"lessThanOrEqual\":\"8.3.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.2.1\",\"lessThanOrEqual\":\"8.2.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.2.0\",\"lessThanOrEqual\":\"8.2.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.1.2\",\"lessThanOrEqual\":\"8.1.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.1.1\",\"lessThanOrEqual\":\"8.1.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.1.0\",\"lessThanOrEqual\":\"8.1.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.0.1\",\"lessThanOrEqual\":\"8.0.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.0.0\",\"lessThanOrEqual\":\"8.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.88.1\",\"lessThanOrEqual\":\"7.88.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.88.0\",\"lessThanOrEqual\":\"7.88.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.87.0\",\"lessThanOrEqual\":\"7.87.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.86.0\",\"lessThanOrEqual\":\"7.86.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.85.0\",\"lessThanOrEqual\":\"7.85.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.84.0\",\"lessThanOrEqual\":\"7.84.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.83.1\",\"lessThanOrEqual\":\"7.83.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.83.0\",\"lessThanOrEqual\":\"7.83.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.82.0\",\"lessThanOrEqual\":\"7.82.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.81.0\",\"lessThanOrEqual\":\"7.81.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.80.0\",\"lessThanOrEqual\":\"7.80.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.79.1\",\"lessThanOrEqual\":\"7.79.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.79.0\",\"lessThanOrEqual\":\"7.79.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.78.0\",\"lessThanOrEqual\":\"7.78.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.77.0\",\"lessThanOrEqual\":\"7.77.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.76.1\",\"lessThanOrEqual\":\"7.76.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.76.0\",\"lessThanOrEqual\":\"7.76.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.75.0\",\"lessThanOrEqual\":\"7.75.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.74.0\",\"lessThanOrEqual\":\"7.74.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"curl\",\"product\":\"curl\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThan\":\"7.74.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.74.0\",\"lessThanOrEqual\":\"8.10.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"8.11.0\",\"lessThan\":\"*\",\"versionType\":\"semver\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":4.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-11-06T16:16:59.652768Z\",\"id\":\"CVE-2024-9681\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-697\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.74.0\",\"versionEndExcluding\":\"8.11.0\",\"matchCriteriaId\":\"D26CBA59-021E-46CB-A1A0-5AD682F6685E\"}]}]}],\"references\":[{\"url\":\"https://curl.se/docs/CVE-2024-9681.html\",\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://curl.se/docs/CVE-2024-9681.json\",\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://hackerone.com/reports/2764830\",\"source\":\"2499f714-1537-4658-8207-48ae4bb9eae9\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/13\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/11/06/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20241213-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:39:45+00:00",
      "cve": "CVE-2024-9681",
      "id": "CVE-2024-9681",
      "initial_release_date": "2024-11-06T00:00:00+00:00",
      "product_status:known_affected": "8",
      "product_status:known_not_affected": "9",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "curl: HSTS subdomain overwrites parent cache entry",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-9681.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-03T04:30:10Z",
      "cve": "CVE-2024-9681",
      "id": "CVE-2024-9681",
      "initial_release_date": "2024-11-07T04:05:29Z",
      "product_status:first_fixed": "13",
      "product_status:known_affected": "330",
      "product_status:known_not_affected": "68",
      "product_status:recommended": "221",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-9681",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-9681.json",
      "version": "51"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2024/11/06/2\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20241213-0006/\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/13\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/10\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/9\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/8\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/5\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/4\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/12\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Apr/11\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T20:56:39.087Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-9681\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-06T16:16:59.652768Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*\"], \"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"7.74.0\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.74.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.1\"}, {\"status\": \"unaffected\", \"version\": \"8.11.0\", \"lessThan\": \"*\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-06T16:17:14.568Z\"}}], \"cna\": {\"title\": \"HSTS subdomain overwrites parent cache entry\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"newfunction\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Daniel Stenberg\"}], \"affected\": [{\"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.10.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.1\"}, {\"status\": \"affected\", \"version\": \"8.10.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.0\"}, {\"status\": \"affected\", \"version\": \"8.9.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.9.1\"}, {\"status\": \"affected\", \"version\": \"8.9.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.9.0\"}, {\"status\": \"affected\", \"version\": \"8.8.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.8.0\"}, {\"status\": \"affected\", \"version\": \"8.7.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.7.1\"}, {\"status\": \"affected\", \"version\": \"8.7.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.7.0\"}, {\"status\": \"affected\", \"version\": \"8.6.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.6.0\"}, {\"status\": \"affected\", \"version\": \"8.5.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.5.0\"}, {\"status\": \"affected\", \"version\": \"8.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"8.3.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.3.0\"}, {\"status\": \"affected\", \"version\": \"8.2.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.2.1\"}, {\"status\": \"affected\", \"version\": \"8.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.2.0\"}, {\"status\": \"affected\", \"version\": \"8.1.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.2\"}, {\"status\": \"affected\", \"version\": \"8.1.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.1\"}, {\"status\": \"affected\", \"version\": \"8.1.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.0\"}, {\"status\": \"affected\", \"version\": \"8.0.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.0.1\"}, {\"status\": \"affected\", \"version\": \"8.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.0.0\"}, {\"status\": \"affected\", \"version\": \"7.88.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.88.1\"}, {\"status\": \"affected\", \"version\": \"7.88.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.88.0\"}, {\"status\": \"affected\", \"version\": \"7.87.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.87.0\"}, {\"status\": \"affected\", \"version\": \"7.86.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.86.0\"}, {\"status\": \"affected\", \"version\": \"7.85.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.85.0\"}, {\"status\": \"affected\", \"version\": \"7.84.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.84.0\"}, {\"status\": \"affected\", \"version\": \"7.83.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.83.1\"}, {\"status\": \"affected\", \"version\": \"7.83.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.83.0\"}, {\"status\": \"affected\", \"version\": \"7.82.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.82.0\"}, {\"status\": \"affected\", \"version\": \"7.81.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.81.0\"}, {\"status\": \"affected\", \"version\": \"7.80.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.80.0\"}, {\"status\": \"affected\", \"version\": \"7.79.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.79.1\"}, {\"status\": \"affected\", \"version\": \"7.79.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.79.0\"}, {\"status\": \"affected\", \"version\": \"7.78.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.78.0\"}, {\"status\": \"affected\", \"version\": \"7.77.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.77.0\"}, {\"status\": \"affected\", \"version\": \"7.76.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.76.1\"}, {\"status\": \"affected\", \"version\": \"7.76.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.76.0\"}, {\"status\": \"affected\", \"version\": \"7.75.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.75.0\"}, {\"status\": \"affected\", \"version\": \"7.74.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.74.0\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://curl.se/docs/CVE-2024-9681.json\", \"name\": \"json\"}, {\"url\": \"https://curl.se/docs/CVE-2024-9681.html\", \"name\": \"www\"}, {\"url\": \"https://hackerone.com/reports/2764830\", \"name\": \"issue\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When curl is asked to use HSTS, the expiry time for a subdomain might\\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\\notherwise intended.\\n\\nThis affects curl using applications that enable HSTS and use URLs with the\\ninsecure `HTTP://` scheme and perform transfers with hosts like\\n`x.example.com` as well as `example.com` where the first host is a subdomain\\nof the second host.\\n\\n(The HSTS cache either needs to have been populated manually or there needs to\\nhave been previous HTTPS accesses done as the cache needs to have entries for\\nthe domains involved to trigger this problem.)\\n\\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\\nparent domain `example.com` in curl\u0027s HSTS cache.\\n\\nThe result of a triggered bug is that HTTP accesses to `example.com` get\\nconverted to HTTPS for a different period of time than what was asked for by\\nthe origin server. If `example.com` for example stops supporting HTTPS at its\\nexpiry time, curl might then fail to access `http://example.com` until the\\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\\nthan otherwise intended.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-1025 Comparison Using Wrong Factors\"}]}], \"providerMetadata\": {\"orgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"shortName\": \"curl\", \"dateUpdated\": \"2024-11-06T07:47:20.162Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-9681\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T20:56:39.087Z\", \"dateReserved\": \"2024-10-09T07:57:47.318Z\", \"assignerOrgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"datePublished\": \"2024-11-06T07:47:20.162Z\", \"assignerShortName\": \"curl\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

WID-SEC-W-2024-3342

Vulnerability from csaf_certbund - Published: 2024-11-05 23:00 - Updated: 2025-12-07 23:00

Summary

cURL: Schwachstelle ermöglicht Denial of Service

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.

Angriff: Ein Angreifer kann eine Schwachstelle in cURL ausnutzen, um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme: - Sonstiges

CVE-2024-9681

Affected products

Known affected 28 products

Product	Identifier	Version
IBM AIX 7.3.1 IBM / AIX	`cpe:/o:ibm:aix:7.3.1`	7.3.1
IBM AIX 7.3.2 IBM / AIX	`cpe:/o:ibm:aix:7.3.2`	7.3.2
Xerox FreeFlow Print Server 9 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:9`	9
NetApp ActiveIQ Unified Manager NetApp	`cpe:/a:netapp:active_iq_unified_manager:-`	—
IBM AIX 7.3.3 IBM / AIX	`cpe:/o:ibm:aix:7.3.3`	7.3.3
Dell NetWorker <19.12.0.1 Dell / NetWorker		<19.12.0.1
Splunk Splunk Enterprise <9.4.3 Splunk / Splunk Enterprise		<9.4.3
Dell NetWorker <19.12.0.4 Dell / NetWorker		<19.12.0.4
Dell PowerProtect Data Domain <7.13.1.40 Dell / PowerProtect Data Domain		<7.13.1.40
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Splunk Splunk Enterprise <9.2.7 Splunk / Splunk Enterprise		<9.2.7
Splunk Splunk Enterprise <9.3.5 Splunk / Splunk Enterprise		<9.3.5
Splunk Splunk Enterprise <9.1.10 Splunk / Splunk Enterprise		<9.1.10
Dell PowerProtect Data Domain <7.10.1.70 Dell / PowerProtect Data Domain		<7.10.1.70
Dell PowerProtect Data Domain <8.3.1.10 Dell / PowerProtect Data Domain		<8.3.1.10
Dell NetWorker <19.13.0.2 Dell / NetWorker		<19.13.0.2
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Open Source cURL <8.11.0 Open Source / cURL		<8.11.0
Dell PowerProtect Data Domain Management Center Dell	`cpe:/a:dell:powerprotect_data_domain_management_center:-`	—
Dell PowerProtect Data Domain Dell / PowerProtect Data Domain	`cpe:/a:dell:powerprotect_data_domain:-`	—
Dell PowerProtect Data Domain OS Dell	`cpe:/o:dell:powerprotect_data_domain_os:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Dell PowerProtect Data Domain <8.4.0.0 Dell / PowerProtect Data Domain		<8.4.0.0
Tenable Security Nessus Network Monitor <6.5.1 Tenable Security / Nessus Network Monitor		<6.5.1
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
IBM Rational ClearCase <11.0.0.3 IBM / Rational ClearCase		<11.0.0.3
IBM Rational ClearCase <10.0.1.3 IBM / Rational ClearCase		<10.0.1.3
IBM Rational ClearCase <9.1.0.8 IBM / Rational ClearCase		<9.1.0.8

References

22 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://curl.se/docs/CVE-2024-9681.html	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-7104-1	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://security.netapp.com/advisory/ntap-2024121…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://alas.aws.amazon.com/AL2/ALAS-2025-2724.html	external
https://www.ibm.com/support/pages/node/7182397	external
https://www.dell.com/support/kbdoc/000309762	external
https://de.tenable.com/security/tns-2025-10	external
https://security.business.xerox.com/wp-content/up…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://www.ibm.com/support/pages/node/7235621	external
https://advisory.splunk.com//advisories/SVD-2025-0710	external
https://www.dell.com/support/kbdoc/en-us/00034870…	external
https://www.dell.com/support/kbdoc/000376224	external
https://www.dell.com/support/kbdoc/000400319	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann eine Schwachstelle in cURL ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3342 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3342.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3342 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3342"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2024-11-05",
        "url": "https://curl.se/docs/CVE-2024-9681.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3926-1 vom 2024-11-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-November/019778.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3925-1 vom 2024-11-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-November/019779.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3927-1 vom 2024-11-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-November/019777.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7104-1 vom 2024-11-18",
        "url": "https://ubuntu.com/security/notices/USN-7104-1"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2024-A94430D221 vom 2024-12-13",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-a94430d221"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20241213-0006 vom 2024-12-13",
        "url": "https://security.netapp.com/advisory/ntap-20241213-0006/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3927-2 vom 2024-12-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-December/020029.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2025-2724 vom 2025-01-10",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2724.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7182397 vom 2025-03-04",
        "url": "https://www.ibm.com/support/pages/node/7182397"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-187 vom 2025-04-19",
        "url": "https://www.dell.com/support/kbdoc/000309762"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2025-10 vom 2025-05-22",
        "url": "https://de.tenable.com/security/tns-2025-10"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-012 vom 2025-06-02",
        "url": "https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20239-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021084.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20083-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021232.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7235621 vom 2025-06-04",
        "url": "https://www.ibm.com/support/pages/node/7235621"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory SVD-2025-0710 vom 2025-07-07",
        "url": "https://advisory.splunk.com//advisories/SVD-2025-0710"
      },
      {
        "category": "external",
        "summary": "Security Update for Dell PowerProtect Data Domain",
        "url": "https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "Dell Security Update vom 2025-10-02",
        "url": "https://www.dell.com/support/kbdoc/000376224"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-335 vom 2025-12-06",
        "url": "https://www.dell.com/support/kbdoc/000400319"
      }
    ],
    "source_lang": "en-US",
    "title": "cURL: Schwachstelle erm\u00f6glicht Denial of Service",
    "tracking": {
      "current_release_date": "2025-12-07T23:00:00.000+00:00",
      "generator": {
        "date": "2025-12-08T07:50:40.320+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2024-3342",
      "initial_release_date": "2024-11-05T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-11-05T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-11-06T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-11-18T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-12-12T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2024-12-19T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-01-09T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-03-04T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-04-21T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-05-22T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Tenable aufgenommen"
        },
        {
          "date": "2025-06-02T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von XEROX aufgenommen"
        },
        {
          "date": "2025-06-03T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-06-04T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-07T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Splunk-SVD aufgenommen"
        },
        {
          "date": "2025-08-04T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-10-01T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-12-07T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Dell aufgenommen"
        }
      ],
      "status": "final",
      "version": "16"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c19.12.0.1",
                "product": {
                  "name": "Dell NetWorker \u003c19.12.0.1",
                  "product_id": "T042999"
                }
              },
              {
                "category": "product_version",
                "name": "19.12.0.1",
                "product": {
                  "name": "Dell NetWorker 19.12.0.1",
                  "product_id": "T042999-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:19.12.0.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c19.12.0.4",
                "product": {
                  "name": "Dell NetWorker \u003c19.12.0.4",
                  "product_id": "T049169"
                }
              },
              {
                "category": "product_version",
                "name": "19.12.0.4",
                "product": {
                  "name": "Dell NetWorker 19.12.0.4",
                  "product_id": "T049169-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:19.12.0.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c19.13.0.2",
                "product": {
                  "name": "Dell NetWorker \u003c19.13.0.2",
                  "product_id": "T049170"
                }
              },
              {
                "category": "product_version",
                "name": "19.13.0.2",
                "product": {
                  "name": "Dell NetWorker 19.13.0.2",
                  "product_id": "T049170-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:19.13.0.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Dell PowerProtect Data Domain",
                "product": {
                  "name": "Dell PowerProtect Data Domain",
                  "product_id": "T045852",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:powerprotect_data_domain:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.4.0.0",
                "product": {
                  "name": "Dell PowerProtect Data Domain \u003c8.4.0.0",
                  "product_id": "T045879"
                }
              },
              {
                "category": "product_version",
                "name": "8.4.0.0",
                "product": {
                  "name": "Dell PowerProtect Data Domain 8.4.0.0",
                  "product_id": "T045879-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:powerprotect_data_domain:8.4.0.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.10.1.70",
                "product": {
                  "name": "Dell PowerProtect Data Domain \u003c7.10.1.70",
                  "product_id": "T045881"
                }
              },
              {
                "category": "product_version",
                "name": "7.10.1.70",
                "product": {
                  "name": "Dell PowerProtect Data Domain 7.10.1.70",
                  "product_id": "T045881-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:powerprotect_data_domain:7.10.1.70"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.13.1.40",
                "product": {
                  "name": "Dell PowerProtect Data Domain \u003c7.13.1.40",
                  "product_id": "T047343"
                }
              },
              {
                "category": "product_version",
                "name": "7.13.1.40",
                "product": {
                  "name": "Dell PowerProtect Data Domain 7.13.1.40",
                  "product_id": "T047343-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:powerprotect_data_domain:7.13.1.40"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.3.1.10",
                "product": {
                  "name": "Dell PowerProtect Data Domain \u003c8.3.1.10",
                  "product_id": "T047344"
                }
              },
              {
                "category": "product_version",
                "name": "8.3.1.10",
                "product": {
                  "name": "Dell PowerProtect Data Domain 8.3.1.10",
                  "product_id": "T047344-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:powerprotect_data_domain:8.3.1.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PowerProtect Data Domain"
          },
          {
            "category": "product_name",
            "name": "Dell PowerProtect Data Domain Management Center",
            "product": {
              "name": "Dell PowerProtect Data Domain Management Center",
              "product_id": "T045853",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:powerprotect_data_domain_management_center:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Dell PowerProtect Data Domain OS",
            "product": {
              "name": "Dell PowerProtect Data Domain OS",
              "product_id": "T045854",
              "product_identification_helper": {
                "cpe": "cpe:/o:dell:powerprotect_data_domain_os:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.3.1",
                "product": {
                  "name": "IBM AIX 7.3.1",
                  "product_id": "T028363",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.3.2",
                "product": {
                  "name": "IBM AIX 7.3.2",
                  "product_id": "T031553",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3.2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.3.3",
                "product": {
                  "name": "IBM AIX 7.3.3",
                  "product_id": "T044339",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AIX"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c9.1.0.8",
                "product": {
                  "name": "IBM Rational ClearCase \u003c9.1.0.8",
                  "product_id": "T041577"
                }
              },
              {
                "category": "product_version",
                "name": "9.1.0.8",
                "product": {
                  "name": "IBM Rational ClearCase 9.1.0.8",
                  "product_id": "T041577-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:rational_clearcase:9.1.0.8"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.0.1.3",
                "product": {
                  "name": "IBM Rational ClearCase \u003c10.0.1.3",
                  "product_id": "T041578"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.1.3",
                "product": {
                  "name": "IBM Rational ClearCase 10.0.1.3",
                  "product_id": "T041578-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:rational_clearcase:10.0.1.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c11.0.0.3",
                "product": {
                  "name": "IBM Rational ClearCase \u003c11.0.0.3",
                  "product_id": "T041579"
                }
              },
              {
                "category": "product_version",
                "name": "11.0.0.3",
                "product": {
                  "name": "IBM Rational ClearCase 11.0.0.3",
                  "product_id": "T041579-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:rational_clearcase:11.0.0.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Rational ClearCase"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "T032260",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c8.11.0",
                "product": {
                  "name": "Open Source cURL \u003c8.11.0",
                  "product_id": "T038774"
                }
              },
              {
                "category": "product_version",
                "name": "8.11.0",
                "product": {
                  "name": "Open Source cURL 8.11.0",
                  "product_id": "T038774-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:curl:curl:8.11.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "cURL"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c9.4.3",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.4.3",
                  "product_id": "T045086"
                }
              },
              {
                "category": "product_version",
                "name": "9.4.3",
                "product": {
                  "name": "Splunk Splunk Enterprise 9.4.3",
                  "product_id": "T045086-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:splunk:splunk:9.4.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.3.5",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.3.5",
                  "product_id": "T045087"
                }
              },
              {
                "category": "product_version",
                "name": "9.3.5",
                "product": {
                  "name": "Splunk Splunk Enterprise 9.3.5",
                  "product_id": "T045087-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:splunk:splunk:9.3.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.2.7",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.2.7",
                  "product_id": "T045088"
                }
              },
              {
                "category": "product_version",
                "name": "9.2.7",
                "product": {
                  "name": "Splunk Splunk Enterprise 9.2.7",
                  "product_id": "T045088-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:splunk:splunk:9.2.7"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.1.10",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.1.10",
                  "product_id": "T045089"
                }
              },
              {
                "category": "product_version",
                "name": "9.1.10",
                "product": {
                  "name": "Splunk Splunk Enterprise 9.1.10",
                  "product_id": "T045089-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:splunk:splunk:9.1.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Splunk Enterprise"
          }
        ],
        "category": "vendor",
        "name": "Splunk"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c6.5.1",
                "product": {
                  "name": "Tenable Security Nessus Network Monitor \u003c6.5.1",
                  "product_id": "T044107"
                }
              },
              {
                "category": "product_version",
                "name": "6.5.1",
                "product": {
                  "name": "Tenable Security Nessus Network Monitor 6.5.1",
                  "product_id": "T044107-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus_network_monitor:6.5.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Nessus Network Monitor"
          }
        ],
        "category": "vendor",
        "name": "Tenable Security"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "Xerox FreeFlow Print Server 9",
                  "product_id": "T002977",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-9681",
      "product_status": {
        "known_affected": [
          "T028363",
          "T031553",
          "T002977",
          "T032260",
          "T044339",
          "T042999",
          "T045086",
          "T049169",
          "T047343",
          "398363",
          "T045088",
          "T045087",
          "T045089",
          "T045881",
          "T047344",
          "T049170",
          "74185",
          "T038774",
          "T045853",
          "T045852",
          "T045854",
          "T002207",
          "T045879",
          "T044107",
          "T000126",
          "T041579",
          "T041578",
          "T041577"
        ]
      },
      "release_date": "2024-11-05T23:00:00.000+00:00",
      "title": "CVE-2024-9681"
    }
  ]
}

WID-SEC-W-2025-0663

Vulnerability from csaf_certbund - Published: 2025-03-31 22:00 - Updated: 2025-06-11 22:00

Summary

Apple iOS und iPadOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, erhöhte Rechte zu erlangen oder Daten zu manipulieren.

Betroffene Betriebssysteme: - MacOS X

CVE-2024-48958

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2024-54502

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2024-54508

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2024-54534

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2024-54543

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2024-56171

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2024-9681

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24085

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24095

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24097

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24113

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24163

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24167

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24173

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24178

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24180

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24182

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24190

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24192

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24193

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24194

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24198

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24202

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24203

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24205

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24206

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24208

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24209

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24210

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24211

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24212

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24213

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24214

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24215

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24216

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24217

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24221

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24230

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24237

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24238

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24243

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24244

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24251

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24252

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24257

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24264

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24270

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24271

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-24283

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-27113

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30425

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30426

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30427

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30428

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30429

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30430

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30432

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30433

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30434

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30436

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30438

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30439

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30445

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30447

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30454

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30456

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30463

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30465

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30466

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30467

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30469

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30470

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-30471

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31182

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31183

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31184

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31191

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31192

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31197

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31199

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31202

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

CVE-2025-31203

Affected products

Known affected 4 products

Product	Identifier	Version
Apple iOS <18.4 Apple / iOS		<18.4
Apple iPadOS <18.4 Apple / iPadOS		<18.4
Apple iPadOS <17.7.6 Apple / iPadOS		<17.7.6
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—

References

6 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/122371	external
https://support.apple.com/en-us/122372	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://lists.suse.com/pipermail/sle-security-upd…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, erh\u00f6hte Rechte zu erlangen oder Daten zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0663 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0663.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0663 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0663"
      },
      {
        "category": "external",
        "summary": "About the security content of iOS 18.4 and iPadOS 18.4 vom 2025-03-31",
        "url": "https://support.apple.com/en-us/122371"
      },
      {
        "category": "external",
        "summary": "About the security content of iPadOS 17.7.6 vom 2025-03-31",
        "url": "https://support.apple.com/en-us/122372"
      },
      {
        "category": "external",
        "summary": "KEV Catalog CVE-2025-24085 vom 2025-01-29",
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085\u0026field_date_added_wrapper=all\u0026field_cve=\u0026sort_by=field_date_added\u0026items_per_page=20\u0026url"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20257-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021061.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple iOS und iPadOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-06-11T22:00:00.000+00:00",
      "generator": {
        "date": "2025-06-12T05:14:23.708+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0663",
      "initial_release_date": "2025-03-31T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-03-31T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-04-28T22:00:00.000+00:00",
          "number": "2",
          "summary": "CVE\u0027s erg\u00e4nzt"
        },
        {
          "date": "2025-05-04T22:00:00.000+00:00",
          "number": "3",
          "summary": "CVE\u0027s erg\u00e4nzt"
        },
        {
          "date": "2025-06-03T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-06-11T22:00:00.000+00:00",
          "number": "5",
          "summary": "CVE-Nummern erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.4",
                "product": {
                  "name": "Apple iOS \u003c18.4",
                  "product_id": "T042234"
                }
              },
              {
                "category": "product_version",
                "name": "18.4",
                "product": {
                  "name": "Apple iOS 18.4",
                  "product_id": "T042234-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:18.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.4",
                "product": {
                  "name": "Apple iPadOS \u003c18.4",
                  "product_id": "T042235"
                }
              },
              {
                "category": "product_version",
                "name": "18.4",
                "product": {
                  "name": "Apple iPadOS 18.4",
                  "product_id": "T042235-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:18.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c17.7.6",
                "product": {
                  "name": "Apple iPadOS \u003c17.7.6",
                  "product_id": "T042236"
                }
              },
              {
                "category": "product_version",
                "name": "17.7.6",
                "product": {
                  "name": "Apple iPadOS 17.7.6",
                  "product_id": "T042236-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:17.7.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-48958",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-48958"
    },
    {
      "cve": "CVE-2024-54502",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-54502"
    },
    {
      "cve": "CVE-2024-54508",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-54508"
    },
    {
      "cve": "CVE-2024-54534",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-54534"
    },
    {
      "cve": "CVE-2024-54543",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-54543"
    },
    {
      "cve": "CVE-2024-56171",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-56171"
    },
    {
      "cve": "CVE-2024-9681",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-9681"
    },
    {
      "cve": "CVE-2025-24085",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24085"
    },
    {
      "cve": "CVE-2025-24095",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24095"
    },
    {
      "cve": "CVE-2025-24097",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24097"
    },
    {
      "cve": "CVE-2025-24113",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24113"
    },
    {
      "cve": "CVE-2025-24163",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24163"
    },
    {
      "cve": "CVE-2025-24167",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24167"
    },
    {
      "cve": "CVE-2025-24173",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24173"
    },
    {
      "cve": "CVE-2025-24178",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24178"
    },
    {
      "cve": "CVE-2025-24180",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24180"
    },
    {
      "cve": "CVE-2025-24182",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24182"
    },
    {
      "cve": "CVE-2025-24190",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24190"
    },
    {
      "cve": "CVE-2025-24192",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24192"
    },
    {
      "cve": "CVE-2025-24193",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24193"
    },
    {
      "cve": "CVE-2025-24194",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24194"
    },
    {
      "cve": "CVE-2025-24198",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24198"
    },
    {
      "cve": "CVE-2025-24202",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24202"
    },
    {
      "cve": "CVE-2025-24203",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24203"
    },
    {
      "cve": "CVE-2025-24205",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24205"
    },
    {
      "cve": "CVE-2025-24206",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24206"
    },
    {
      "cve": "CVE-2025-24208",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24208"
    },
    {
      "cve": "CVE-2025-24209",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24209"
    },
    {
      "cve": "CVE-2025-24210",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24210"
    },
    {
      "cve": "CVE-2025-24211",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24211"
    },
    {
      "cve": "CVE-2025-24212",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24212"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24214",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24214"
    },
    {
      "cve": "CVE-2025-24215",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24215"
    },
    {
      "cve": "CVE-2025-24216",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24216"
    },
    {
      "cve": "CVE-2025-24217",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24217"
    },
    {
      "cve": "CVE-2025-24221",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24221"
    },
    {
      "cve": "CVE-2025-24230",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24230"
    },
    {
      "cve": "CVE-2025-24237",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24237"
    },
    {
      "cve": "CVE-2025-24238",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24238"
    },
    {
      "cve": "CVE-2025-24243",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24243"
    },
    {
      "cve": "CVE-2025-24244",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24244"
    },
    {
      "cve": "CVE-2025-24251",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24251"
    },
    {
      "cve": "CVE-2025-24252",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24252"
    },
    {
      "cve": "CVE-2025-24257",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24257"
    },
    {
      "cve": "CVE-2025-24264",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24264"
    },
    {
      "cve": "CVE-2025-24270",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24270"
    },
    {
      "cve": "CVE-2025-24271",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24271"
    },
    {
      "cve": "CVE-2025-24283",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24283"
    },
    {
      "cve": "CVE-2025-27113",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-27113"
    },
    {
      "cve": "CVE-2025-30425",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30425"
    },
    {
      "cve": "CVE-2025-30426",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30426"
    },
    {
      "cve": "CVE-2025-30427",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30427"
    },
    {
      "cve": "CVE-2025-30428",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30428"
    },
    {
      "cve": "CVE-2025-30429",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30429"
    },
    {
      "cve": "CVE-2025-30430",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30430"
    },
    {
      "cve": "CVE-2025-30432",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30432"
    },
    {
      "cve": "CVE-2025-30433",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30433"
    },
    {
      "cve": "CVE-2025-30434",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30434"
    },
    {
      "cve": "CVE-2025-30436",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30436"
    },
    {
      "cve": "CVE-2025-30438",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30438"
    },
    {
      "cve": "CVE-2025-30439",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30439"
    },
    {
      "cve": "CVE-2025-30445",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30445"
    },
    {
      "cve": "CVE-2025-30447",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30447"
    },
    {
      "cve": "CVE-2025-30454",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30454"
    },
    {
      "cve": "CVE-2025-30456",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30456"
    },
    {
      "cve": "CVE-2025-30463",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30463"
    },
    {
      "cve": "CVE-2025-30465",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30465"
    },
    {
      "cve": "CVE-2025-30466",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30466"
    },
    {
      "cve": "CVE-2025-30467",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30467"
    },
    {
      "cve": "CVE-2025-30469",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30469"
    },
    {
      "cve": "CVE-2025-30470",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30470"
    },
    {
      "cve": "CVE-2025-30471",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30471"
    },
    {
      "cve": "CVE-2025-31182",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31182"
    },
    {
      "cve": "CVE-2025-31183",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31183"
    },
    {
      "cve": "CVE-2025-31184",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31184"
    },
    {
      "cve": "CVE-2025-31191",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31191"
    },
    {
      "cve": "CVE-2025-31192",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31192"
    },
    {
      "cve": "CVE-2025-31197",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31197"
    },
    {
      "cve": "CVE-2025-31199",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31199"
    },
    {
      "cve": "CVE-2025-31202",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31202"
    },
    {
      "cve": "CVE-2025-31203",
      "product_status": {
        "known_affected": [
          "T042234",
          "T042235",
          "T042236",
          "T002207"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31203"
    }
  ]
}

WID-SEC-W-2025-0668

Vulnerability from csaf_certbund - Published: 2025-03-31 22:00 - Updated: 2026-06-11 22:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um erhöhte Rechte - sogar Root-Rechte - zu erlangen, um vertrauliche Informationen offenzulegen, um beliebigen Code auszuführen, um Daten zu manipulieren, um Sicherheitsmaßnahmen - sogar Sandbox-Einschränkungen - zu umgehen oder um einen Denial-of-Service-Zustand auszulösen.

Betroffene Betriebssysteme: - MacOS X

CVE-2023-27043

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2024-40864

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2024-48958

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2024-54533

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2024-56171

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2024-9681

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24085

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24093

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24097

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24113

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24139

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24148

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24157

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24163

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24164

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24165

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24167

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24170

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24172

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24173

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24178

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24180

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24181

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24182

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24190

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24191

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24192

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24194

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24195

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24196

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24198

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24199

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24202

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24203

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24204

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24205

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24207

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24209

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24210

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24211

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24212

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24213

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24214

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24215

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24216

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24217

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24218

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24228

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24229

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24230

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24231

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24232

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24233

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24234

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24235

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24236

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24237

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24238

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24239

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24240

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24241

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24242

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24243

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24244

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24245

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24246

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24247

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24248

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24249

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24250

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24251

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24253

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24254

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24255

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24256

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24257

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24259

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24260

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24261

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24262

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24263

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24264

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24265

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24266

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24267

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24268

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24269

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24270

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24272

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24273

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24276

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24277

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24278

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24279

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24280

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24281

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24282

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24283

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-24284

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-27113

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30424

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30425

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30426

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30427

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30429

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30430

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30431

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30432

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30433

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30435

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30437

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30438

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30439

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30443

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30444

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30445

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30446

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30447

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30449

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30450

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30451

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30452

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30454

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30455

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30456

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30457

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30458

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30460

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30461

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30462

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30463

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30464

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30465

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30466

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30467

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30470

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-30471

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31182

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31183

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31184

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31187

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31188

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31189

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31191

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31192

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31194

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31195

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31197

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31198

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31199

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31202

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31203

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31231

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31261

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31263

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31264

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-31272

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-43205

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-43278

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-46293

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

CVE-2025-46308

Affected products

Known affected 4 products

Product	Identifier	Version
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Apple macOS Ventura <13.7.5 Apple / macOS		Ventura <13.7.5
Apple macOS Sonoma <14.7.5 Apple / macOS		Sonoma <14.7.5
Apple macOS Sequoia <15.4 Apple / macOS		Sequoia <15.4

References

7 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/122375	external
https://support.apple.com/en-us/122374	external
https://support.apple.com/en-us/122373	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://lists.suse.com/pipermail/sle-security-upd…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um erh\u00f6hte Rechte - sogar Root-Rechte - zu erlangen, um vertrauliche Informationen offenzulegen, um beliebigen Code auszuf\u00fchren, um Daten zu manipulieren, um Sicherheitsma\u00dfnahmen - sogar Sandbox-Einschr\u00e4nkungen - zu umgehen oder um einen Denial-of-Service-Zustand auszul\u00f6sen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0668 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0668.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0668 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0668"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Ventura 13.7.5 vom 2025-03-31",
        "url": "https://support.apple.com/en-us/122375"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Sonoma 14.7.5 vom 2025-03-31",
        "url": "https://support.apple.com/en-us/122374"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Sequoia 15.4 vom 2025-03-31",
        "url": "https://support.apple.com/en-us/122373"
      },
      {
        "category": "external",
        "summary": "KEV Catalog CVE-2025-24085 vom 2025-01-29",
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085\u0026field_date_added_wrapper=all\u0026field_cve=\u0026sort_by=field_date_added\u0026items_per_page=20\u0026url"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20257-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021061.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple macOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-11T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-12T07:31:01.138+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2025-0668",
      "initial_release_date": "2025-03-31T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-03-31T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-04-28T22:00:00.000+00:00",
          "number": "2",
          "summary": "CVE\u0027s erg\u00e4nzt"
        },
        {
          "date": "2025-06-03T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-06-11T22:00:00.000+00:00",
          "number": "4",
          "summary": "CVE-Nummern erg\u00e4nzt"
        },
        {
          "date": "2025-08-11T22:00:00.000+00:00",
          "number": "5",
          "summary": "CVE-2025-43205 erg\u00e4nzt"
        },
        {
          "date": "2025-11-12T23:00:00.000+00:00",
          "number": "6",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-106791"
        },
        {
          "date": "2026-06-11T22:00:00.000+00:00",
          "number": "7",
          "summary": "Referenz(en) aufgenommen: CVE-2025-30431, CVE-2025-24165, CVE-2025-24268, CVE-2025-24284, CVE-2025-31272, CVE-2025-43278, CVE-2025-46293, CVE-2025-46308"
        }
      ],
      "status": "final",
      "version": "7"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Ventura \u003c13.7.5",
                "product": {
                  "name": "Apple macOS Ventura \u003c13.7.5",
                  "product_id": "T042238"
                }
              },
              {
                "category": "product_version",
                "name": "Ventura 13.7.5",
                "product": {
                  "name": "Apple macOS Ventura 13.7.5",
                  "product_id": "T042238-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:ventura__13.7.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sonoma \u003c14.7.5",
                "product": {
                  "name": "Apple macOS Sonoma \u003c14.7.5",
                  "product_id": "T042239"
                }
              },
              {
                "category": "product_version",
                "name": "Sonoma 14.7.5",
                "product": {
                  "name": "Apple macOS Sonoma 14.7.5",
                  "product_id": "T042239-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sonoma__14.7.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sequoia \u003c15.4",
                "product": {
                  "name": "Apple macOS Sequoia \u003c15.4",
                  "product_id": "T042240"
                }
              },
              {
                "category": "product_version",
                "name": "Sequoia 15.4",
                "product": {
                  "name": "Apple macOS Sequoia 15.4",
                  "product_id": "T042240-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sequoia__15.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-27043",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2023-27043"
    },
    {
      "cve": "CVE-2024-40864",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-40864"
    },
    {
      "cve": "CVE-2024-48958",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-48958"
    },
    {
      "cve": "CVE-2024-54533",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-54533"
    },
    {
      "cve": "CVE-2024-56171",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-56171"
    },
    {
      "cve": "CVE-2024-9681",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2024-9681"
    },
    {
      "cve": "CVE-2025-24085",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24085"
    },
    {
      "cve": "CVE-2025-24093",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24093"
    },
    {
      "cve": "CVE-2025-24097",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24097"
    },
    {
      "cve": "CVE-2025-24113",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24113"
    },
    {
      "cve": "CVE-2025-24139",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24139"
    },
    {
      "cve": "CVE-2025-24148",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24148"
    },
    {
      "cve": "CVE-2025-24157",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24157"
    },
    {
      "cve": "CVE-2025-24163",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24163"
    },
    {
      "cve": "CVE-2025-24164",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24164"
    },
    {
      "cve": "CVE-2025-24165",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24165"
    },
    {
      "cve": "CVE-2025-24167",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24167"
    },
    {
      "cve": "CVE-2025-24170",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24170"
    },
    {
      "cve": "CVE-2025-24172",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24172"
    },
    {
      "cve": "CVE-2025-24173",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24173"
    },
    {
      "cve": "CVE-2025-24178",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24178"
    },
    {
      "cve": "CVE-2025-24180",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24180"
    },
    {
      "cve": "CVE-2025-24181",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24181"
    },
    {
      "cve": "CVE-2025-24182",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24182"
    },
    {
      "cve": "CVE-2025-24190",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24190"
    },
    {
      "cve": "CVE-2025-24191",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24191"
    },
    {
      "cve": "CVE-2025-24192",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24192"
    },
    {
      "cve": "CVE-2025-24194",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24194"
    },
    {
      "cve": "CVE-2025-24195",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24195"
    },
    {
      "cve": "CVE-2025-24196",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24196"
    },
    {
      "cve": "CVE-2025-24198",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24198"
    },
    {
      "cve": "CVE-2025-24199",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24199"
    },
    {
      "cve": "CVE-2025-24202",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24202"
    },
    {
      "cve": "CVE-2025-24203",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24203"
    },
    {
      "cve": "CVE-2025-24204",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24204"
    },
    {
      "cve": "CVE-2025-24205",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24205"
    },
    {
      "cve": "CVE-2025-24207",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24207"
    },
    {
      "cve": "CVE-2025-24209",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24209"
    },
    {
      "cve": "CVE-2025-24210",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24210"
    },
    {
      "cve": "CVE-2025-24211",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24211"
    },
    {
      "cve": "CVE-2025-24212",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24212"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24214",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24214"
    },
    {
      "cve": "CVE-2025-24215",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24215"
    },
    {
      "cve": "CVE-2025-24216",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24216"
    },
    {
      "cve": "CVE-2025-24217",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24217"
    },
    {
      "cve": "CVE-2025-24218",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24218"
    },
    {
      "cve": "CVE-2025-24228",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24228"
    },
    {
      "cve": "CVE-2025-24229",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24229"
    },
    {
      "cve": "CVE-2025-24230",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24230"
    },
    {
      "cve": "CVE-2025-24231",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24231"
    },
    {
      "cve": "CVE-2025-24232",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24232"
    },
    {
      "cve": "CVE-2025-24233",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24233"
    },
    {
      "cve": "CVE-2025-24234",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24234"
    },
    {
      "cve": "CVE-2025-24235",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24235"
    },
    {
      "cve": "CVE-2025-24236",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24236"
    },
    {
      "cve": "CVE-2025-24237",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24237"
    },
    {
      "cve": "CVE-2025-24238",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24238"
    },
    {
      "cve": "CVE-2025-24239",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24239"
    },
    {
      "cve": "CVE-2025-24240",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24240"
    },
    {
      "cve": "CVE-2025-24241",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24241"
    },
    {
      "cve": "CVE-2025-24242",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24242"
    },
    {
      "cve": "CVE-2025-24243",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24243"
    },
    {
      "cve": "CVE-2025-24244",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24244"
    },
    {
      "cve": "CVE-2025-24245",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24245"
    },
    {
      "cve": "CVE-2025-24246",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24246"
    },
    {
      "cve": "CVE-2025-24247",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24247"
    },
    {
      "cve": "CVE-2025-24248",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24248"
    },
    {
      "cve": "CVE-2025-24249",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24249"
    },
    {
      "cve": "CVE-2025-24250",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24250"
    },
    {
      "cve": "CVE-2025-24251",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24251"
    },
    {
      "cve": "CVE-2025-24253",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24253"
    },
    {
      "cve": "CVE-2025-24254",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24254"
    },
    {
      "cve": "CVE-2025-24255",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24255"
    },
    {
      "cve": "CVE-2025-24256",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24256"
    },
    {
      "cve": "CVE-2025-24257",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24257"
    },
    {
      "cve": "CVE-2025-24259",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24259"
    },
    {
      "cve": "CVE-2025-24260",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24260"
    },
    {
      "cve": "CVE-2025-24261",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24261"
    },
    {
      "cve": "CVE-2025-24262",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24262"
    },
    {
      "cve": "CVE-2025-24263",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24263"
    },
    {
      "cve": "CVE-2025-24264",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24264"
    },
    {
      "cve": "CVE-2025-24265",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24265"
    },
    {
      "cve": "CVE-2025-24266",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24266"
    },
    {
      "cve": "CVE-2025-24267",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24267"
    },
    {
      "cve": "CVE-2025-24268",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24268"
    },
    {
      "cve": "CVE-2025-24269",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24269"
    },
    {
      "cve": "CVE-2025-24270",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24270"
    },
    {
      "cve": "CVE-2025-24272",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24272"
    },
    {
      "cve": "CVE-2025-24273",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24273"
    },
    {
      "cve": "CVE-2025-24276",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24276"
    },
    {
      "cve": "CVE-2025-24277",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24277"
    },
    {
      "cve": "CVE-2025-24278",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24278"
    },
    {
      "cve": "CVE-2025-24279",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24279"
    },
    {
      "cve": "CVE-2025-24280",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24280"
    },
    {
      "cve": "CVE-2025-24281",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24281"
    },
    {
      "cve": "CVE-2025-24282",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24282"
    },
    {
      "cve": "CVE-2025-24283",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24283"
    },
    {
      "cve": "CVE-2025-24284",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-24284"
    },
    {
      "cve": "CVE-2025-27113",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-27113"
    },
    {
      "cve": "CVE-2025-30424",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30424"
    },
    {
      "cve": "CVE-2025-30425",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30425"
    },
    {
      "cve": "CVE-2025-30426",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30426"
    },
    {
      "cve": "CVE-2025-30427",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30427"
    },
    {
      "cve": "CVE-2025-30429",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30429"
    },
    {
      "cve": "CVE-2025-30430",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30430"
    },
    {
      "cve": "CVE-2025-30431",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30431"
    },
    {
      "cve": "CVE-2025-30432",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30432"
    },
    {
      "cve": "CVE-2025-30433",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30433"
    },
    {
      "cve": "CVE-2025-30435",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30435"
    },
    {
      "cve": "CVE-2025-30437",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30437"
    },
    {
      "cve": "CVE-2025-30438",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30438"
    },
    {
      "cve": "CVE-2025-30439",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30439"
    },
    {
      "cve": "CVE-2025-30443",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30443"
    },
    {
      "cve": "CVE-2025-30444",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30444"
    },
    {
      "cve": "CVE-2025-30445",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30445"
    },
    {
      "cve": "CVE-2025-30446",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30446"
    },
    {
      "cve": "CVE-2025-30447",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30447"
    },
    {
      "cve": "CVE-2025-30449",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30449"
    },
    {
      "cve": "CVE-2025-30450",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30450"
    },
    {
      "cve": "CVE-2025-30451",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30451"
    },
    {
      "cve": "CVE-2025-30452",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30452"
    },
    {
      "cve": "CVE-2025-30454",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30454"
    },
    {
      "cve": "CVE-2025-30455",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30455"
    },
    {
      "cve": "CVE-2025-30456",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30456"
    },
    {
      "cve": "CVE-2025-30457",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30457"
    },
    {
      "cve": "CVE-2025-30458",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30458"
    },
    {
      "cve": "CVE-2025-30460",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30460"
    },
    {
      "cve": "CVE-2025-30461",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30461"
    },
    {
      "cve": "CVE-2025-30462",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30462"
    },
    {
      "cve": "CVE-2025-30463",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30463"
    },
    {
      "cve": "CVE-2025-30464",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30464"
    },
    {
      "cve": "CVE-2025-30465",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30465"
    },
    {
      "cve": "CVE-2025-30466",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30466"
    },
    {
      "cve": "CVE-2025-30467",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30467"
    },
    {
      "cve": "CVE-2025-30470",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30470"
    },
    {
      "cve": "CVE-2025-30471",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-30471"
    },
    {
      "cve": "CVE-2025-31182",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31182"
    },
    {
      "cve": "CVE-2025-31183",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31183"
    },
    {
      "cve": "CVE-2025-31184",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31184"
    },
    {
      "cve": "CVE-2025-31187",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31187"
    },
    {
      "cve": "CVE-2025-31188",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31188"
    },
    {
      "cve": "CVE-2025-31189",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31189"
    },
    {
      "cve": "CVE-2025-31191",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31191"
    },
    {
      "cve": "CVE-2025-31192",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31192"
    },
    {
      "cve": "CVE-2025-31194",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31194"
    },
    {
      "cve": "CVE-2025-31195",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31195"
    },
    {
      "cve": "CVE-2025-31197",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31197"
    },
    {
      "cve": "CVE-2025-31198",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31198"
    },
    {
      "cve": "CVE-2025-31199",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31199"
    },
    {
      "cve": "CVE-2025-31202",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31202"
    },
    {
      "cve": "CVE-2025-31203",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31203"
    },
    {
      "cve": "CVE-2025-31231",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31231"
    },
    {
      "cve": "CVE-2025-31261",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31261"
    },
    {
      "cve": "CVE-2025-31263",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31263"
    },
    {
      "cve": "CVE-2025-31264",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31264"
    },
    {
      "cve": "CVE-2025-31272",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-31272"
    },
    {
      "cve": "CVE-2025-43205",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-43205"
    },
    {
      "cve": "CVE-2025-43278",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-43278"
    },
    {
      "cve": "CVE-2025-46293",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-46293"
    },
    {
      "cve": "CVE-2025-46308",
      "product_status": {
        "known_affected": [
          "T002207",
          "T042238",
          "T042239",
          "T042240"
        ]
      },
      "release_date": "2025-03-31T22:00:00.000+00:00",
      "title": "CVE-2025-46308"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-9681 (GCVE-0-2024-9681)

WID-SEC-W-2024-3342

WID-SEC-W-2025-0663

WID-SEC-W-2025-0668

Tags

Sightings

Nomenclature