| CVE-2025-31198 |
Apple (macOS, iOS) |
Unzip utility path traversal using symlinks |
| CVE-2025-31191 |
Apple (macOS, iOS) |
Sandbox escape using keychain item redefinitions |
| CVE-2025-26721 |
Barebox (bootloader) |
Buffer overflow during file creation in the persistent storage |
|
| CVE-2025-26722 |
Barebox (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the SquashFS filesystem |
| CVE-2025-26723 |
Barebox (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the EXT4 filesystem |
| CVE-2025-26724 |
Barebox (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the CramFS filesystem |
| CVE-2025-26725 |
Barebox (bootloader) |
Buffer overflow during directory entry parsing in the JFFS2 filesystem |
| CVE-2025-26726 |
U-boot (bootloader) |
Buffer overflow during directory table parsing in the SquashFS filesystem |
| CVE-2025-26727 |
U-boot (bootloader) |
Buffer overflow during inode parsing in the SquashFS filesystem |
| CVE-2025-26728 |
U-boot (bootloader) |
Buffer overflow during file reading in the SquashFS filesystem |
| CVE-2025-26729 |
U-boot (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the EroFS filesystem |
| CVE-2025-0677 |
GRUB2 (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the UFS filesystem |
| CVE-2025-0678 |
GRUB2 (bootloader) |
Buffer overflow during file reads due to an integer overflow in the SquashFS filesystem |
| CVE-2025-0684 |
GRUB2 (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the ReiserFS filesystem |
| CVE-2025-0685 |
GRUB2 (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the JFS filesystem |
| CVE-2025-0686 |
GRUB2 (bootloader) |
Buffer overflow during symbolic link handling due to an integer overflow in the RomFS filesystem |
| CVE-2025-0689 |
GRUB2 (bootloader) |
Buffer overflow during block reads due to an out-of-bounds operation in the UDF filesystem |
| CVE-2025-0690 |
GRUB2 (bootloader) |
Buffer overflow due to an unsafe signed integer overflow in the read builtin command |
| CVE-2025-0118 |
GRUB2 (bootloader) |
Arbitrary memory read due to a misconfiguration of the dump command in Secure Boot environments |
| CVE-2025-1125 |
GRUB2 (bootloader) |
Buffer overflow during file opens due to an integer overflow in the HFS filesystem |
| CVE-2024-56738 |
GRUB2 (bootloader) |
Cryptographic side channel attack |
| CVE-2024-56737 |
GRUB2 (bootloader) |
Buffer overflow in filesystem mounting due to wild strcpy in the HFS filesystem |
| CVE-2024-44243 |
Apple (macOS, iOS) |
storagekitd-based SIP bypass |
| CVE-2024-44133 |
Apple (macOS, iOS) |
Browser-based TCC bypass |
| CVE-2023-32369 |
Apple (macOS, iOS) |
migrationd-based SIP bypass |
| CVE-2023-29491 |
ncurses (library) |
Multiple memory corruption vulnerabilities in the ncurses library |
| CVE-2022-4499 |
TP-Link routers |
Cryptographic side-channel attack in httpd authentication method |
| CVE-2022-4498 |
TP-Link routers |
Buffer overflow in httpd |
| CVE-2022-42821 |
Apple (macOS, iOS) |
AppleDouble-based Gatekeeper bypass |
| CVE-2022-29800 |
Linux |
networkd-dispatcher race condition (TOCTOU) |
| CVE-2022-29799 |
Linux |
networkd-dispatcher directory traversal |
| CVE-2022-26706 |
Apple (macOS, iOS) |
launchd stdin-based sandbox escape |
| CVE-2022-2587 |
ChromeOS |
d-bus-based remote memory corruption vulnerability |
| CVE-2022-0987 |
Linux |
Packagekit information disclosure disclosure vulnerability |
| CVE-2021-42601 |
mce (Android SDK) |
mce SDK vulnerability |
| CVE-2021-42600 |
mce (Android SDK) |
mce SDK vulnerability |
| CVE-2021-42599 |
mce (Android SDK) |
mce SDK vulnerability |
| CVE-2021-42598 |
mce (Android SDK) |
mce SDK vulnerability |
| CVE-2021-35247 |
SolarWinds Serv-U (Windows) |
SolarWinds Serv-U LDAP injection vulnerability |
| CVE-2021-30970 |
Apple (macOS, iOS) |
Injection-based TCC bypass |
| CVE-2021-30892 |
Apple (macOS, iOS) |
system_installd-based SIP bypass |
| CVE-2020-35785 |
Netgear routers |
NETGEAR DGN2200v1 authentication bypass |
| CVE-2017-0095 |
Hyper-V (Microsoft) |
Hyper-V vSMB remote code execution |
