Reddit NetSec

AlienVault OTX General

CVE Database V5

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the firmware upgrade feature. The issue results from the lack of an anti-downgrade mechanism. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the device. Was ZDI-CAN-26299.

CVE-2025-8321 is a firmware downgrade vulnerability affecting Tesla Wall Connector devices, specifically version 24.44.1. The core issue stems from the absence of an anti-downgrade mechanism in the firmware upgrade process, allowing an attacker with physical access to the device to revert the firmware to an older, potentially vulnerable version. This downgrade can be leveraged in combination with other vulnerabilities to execute arbitrary code on the device without requiring any authentication or user interaction. The vulnerability is classified under CWE-1328, which relates to security version number mutability, indicating that the device does not properly enforce version control during firmware updates. The CVSS v3.0 base score is 6.8 (medium severity), with attack vector being physical (AV:P), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no known exploits are currently reported in the wild, the vulnerability presents a significant risk because it allows attackers to gain full control over the Wall Connector device, potentially disrupting charging operations or using the device as a foothold within a local network environment. The lack of authentication and user interaction requirements further increase the risk if an attacker can physically access the device. Tesla Wall Connectors are widely used in residential and commercial settings for electric vehicle charging, making this vulnerability relevant to infrastructure supporting EV adoption.

Detailed information about CVE-2025-8321: CWE-1328: Security Version Number Mutable to Older Versions in Tesla Wall Connector affecting Tesla Wall Connector. Ge

CVE-2025-8321: CWE-1328: Security Version Number Mutable to Older Versions in Tesla Wall Connector - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8321: CWE-1328: Security Version Number Mutable to Older Versions in Tesla Wall Connector

Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of the HTTP Content-Length header. The issue results from the lack of proper validation of user-supplied data, which can result in memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26300.

CVE-2025-8320 is a high-severity remote code execution vulnerability affecting Tesla Wall Connector devices, specifically version 24.44.1. The root cause lies in improper validation of the HTTP Content-Length header during input parsing, classified under CWE-1284 (Improper Validation of Specified Quantity in Input). This flaw allows a network-adjacent attacker to send specially crafted HTTP requests with manipulated Content-Length headers that cause the device to access memory beyond the allocated buffer boundaries. Such out-of-bounds memory access can be exploited to execute arbitrary code within the context of the Wall Connector device. Notably, exploitation does not require authentication or user interaction, significantly lowering the barrier for attackers. The vulnerability was identified and assigned by the Zero Day Initiative (ZDI) as ZDI-CAN-26300 and has a CVSS v3.0 score of 8.8, indicating high impact on confidentiality, integrity, and availability. The Tesla Wall Connector is a network-connected electric vehicle charging device, and successful exploitation could allow attackers to compromise the device firmware, potentially leading to unauthorized control over charging operations or pivoting into connected networks. Although no known exploits are currently observed in the wild, the vulnerability’s characteristics make it a critical concern for organizations deploying Tesla Wall Connectors in their infrastructure.

Detailed information about CVE-2025-8320: CWE-1284: Improper Validation of Specified Quantity in Input in Tesla Wall Connector affecting Tesla Wall Connector. G

CVE-2025-8320: CWE-1284: Improper Validation of Specified Quantity in Input in Tesla Wall Connector - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8320: CWE-1284: Improper Validation of Specified Quantity in Input in Tesla Wall Connector

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.

CVE-2025-43265 is a vulnerability identified in Apple macOS and related Apple operating systems including watchOS, visionOS, iOS, iPadOS, and tvOS. The issue stems from an out-of-bounds read caused by insufficient input validation when processing maliciously crafted web content. An out-of-bounds read occurs when a program reads data outside the boundaries of allocated memory, which can lead to unintended disclosure of internal application states or memory contents. In this case, the vulnerability allows an attacker to craft web content that, when processed by the affected Apple operating systems, may disclose sensitive internal states of the application. This could potentially expose information that aids further exploitation or reveals sensitive data. Apple has addressed this vulnerability by improving input validation in the affected components and released patches in watchOS 11.6, visionOS 2.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, and tvOS 18.6. The vulnerability does not require user authentication but likely requires user interaction in the form of processing or rendering malicious web content, such as visiting a malicious website or opening a malicious web-based resource. There are no known exploits in the wild at the time of publication, and no CVSS score has been assigned yet. The vulnerability affects unspecified versions of macOS and related Apple OS versions prior to the patched releases. The root cause is an out-of-bounds read due to improper input validation, which Apple has remediated with improved input validation checks to prevent memory access violations and information leakage.

Detailed information about CVE-2025-43265: Processing maliciously crafted web content may disclose internal states of the app in Apple macOS affecting Apple mac

CVE-2025-43265: Processing maliciously crafted web content may disclose internal states of the app in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43265: Processing maliciously crafted web content may disclose internal states of the app in Apple macOS

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6. An app may be able to cause unexpected system termination.

CVE-2025-43237 is a vulnerability identified in Apple macOS, specifically addressed in macOS Sequoia 15.6. The issue stems from an out-of-bounds write condition due to insufficient bounds checking in certain parts of the operating system. An out-of-bounds write occurs when a program writes data outside the boundaries of allocated memory buffers, which can lead to memory corruption. In this case, the vulnerability allows a malicious or compromised application to cause unexpected system termination, effectively triggering a denial-of-service (DoS) condition. While the details about the exact component affected or the precise nature of the out-of-bounds write are not specified, the consequence is a system crash or forced reboot, which disrupts normal operations. The vulnerability does not currently have any known exploits in the wild, and no CVSS score has been assigned yet. The fix involves improved bounds checking to prevent memory corruption. The affected versions are unspecified, but the patch is included in macOS Sequoia 15.6, indicating that earlier versions may be vulnerable. No authentication or user interaction requirements are mentioned, suggesting that an app running with normal user privileges could trigger the issue. This vulnerability primarily impacts system availability by causing unexpected termination, but it does not explicitly mention confidentiality or integrity impacts. Given the nature of macOS as a widely used desktop and laptop operating system, this vulnerability could affect a broad range of users and organizations relying on Apple hardware and software.

Detailed information about CVE-2025-43237: An app may be able to cause unexpected system termination in Apple macOS affecting Apple macOS. Get real-time updates

CVE-2025-43237: An app may be able to cause unexpected system termination in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43237: An app may be able to cause unexpected system termination in Apple macOS

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data.

CVE-2025-43233 is a vulnerability identified in Apple macOS operating systems where a malicious application, masquerading as an HTTPS proxy, could gain unauthorized access to sensitive user data. The vulnerability arises from insufficient access restrictions that allowed such a malicious proxy app to intercept or access data that should have been protected during HTTPS communications. This could include sensitive information such as authentication tokens, personal data, or other confidential content transmitted over supposedly secure HTTPS connections. Apple addressed this issue by implementing improved access restrictions in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The affected versions prior to these patches are unspecified but presumably include earlier releases of these macOS versions. The vulnerability does not currently have a CVSS score and there are no known exploits in the wild at the time of publication. However, the nature of the vulnerability suggests that if exploited, it could allow a malicious app to bypass HTTPS protections, undermining the confidentiality and integrity of user data. The attack vector requires the malicious app to be installed on the victim's machine, acting as a proxy to intercept HTTPS traffic, which implies that some level of user interaction or social engineering might be necessary to deploy the malicious app. The vulnerability highlights the risk of local privilege escalation or data interception through compromised or malicious applications on macOS systems.

Detailed information about CVE-2025-43233: A malicious app acting as a HTTPS proxy could get access to sensitive user data in Apple macOS affecting Apple macOS.

CVE-2025-43233: A malicious app acting as a HTTPS proxy could get access to sensitive user data in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43233: A malicious app acting as a HTTPS proxy could get access to sensitive user data in Apple macOS

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted USD file may disclose memory contents.

CVE-2025-43218 is a vulnerability identified in Apple macOS, specifically related to the processing of USD (Universal Scene Description) files. The vulnerability arises from an out-of-bounds read condition triggered by maliciously crafted USD files. An out-of-bounds read occurs when a program reads data outside the boundaries of allocated memory, potentially exposing sensitive information stored in adjacent memory regions. In this case, the flaw allows an attacker to cause the system to disclose memory contents unintentionally. The root cause was insufficient input validation when parsing USD files, which Apple addressed by improving input validation mechanisms in macOS Sequoia 15.6. The vulnerability affects unspecified versions of macOS prior to this patch. There are no known exploits in the wild at the time of publication, and no CVSS score has been assigned yet. The vulnerability does not appear to require user authentication or interaction beyond opening or processing a malicious USD file, which could be delivered via email, web downloads, or other file transfer methods. Since USD files are used in 3D graphics and animation workflows, the attack surface includes users and organizations handling such content on macOS systems.

Detailed information about CVE-2025-43218: Processing a maliciously crafted USD file may disclose memory contents in Apple macOS affecting Apple macOS. Get real

CVE-2025-43218: Processing a maliciously crafted USD file may disclose memory contents in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43218: Processing a maliciously crafted USD file may disclose memory contents in Apple macOS

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access protected user data.

CVE-2025-43206 is a vulnerability identified in Apple macOS operating systems, specifically related to the parsing and handling of directory paths. The root cause is a parsing issue that allowed insufficient validation of directory paths, which could be exploited by a malicious application to gain unauthorized access to protected user data. This vulnerability affects multiple versions of macOS, including macOS Sequoia 15.6, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7, where the issue has been addressed through improved path validation mechanisms. The vulnerability enables an app to bypass normal access controls by exploiting the flawed path parsing logic, potentially allowing it to read sensitive files or data that should be protected by the operating system's security model. Although there are no known exploits in the wild at the time of publication, the nature of the vulnerability suggests that it could be leveraged by attackers to compromise user confidentiality and privacy. The vulnerability does not require user interaction beyond app installation and does not specify whether elevated privileges are needed, but given it involves an app, it likely requires the app to be installed and executed on the target system. The lack of a CVSS score indicates that the severity assessment must be inferred from the technical details and potential impact.

Detailed information about CVE-2025-43206: An app may be able to access protected user data in Apple macOS affecting Apple macOS. Get real-time updates, technic

CVE-2025-43206: An app may be able to access protected user data in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43206: An app may be able to access protected user data in Apple macOS

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges.

CVE-2025-43196 is a privilege escalation vulnerability affecting Apple macOS operating systems. The vulnerability stems from a path handling issue that allows an application to gain root privileges by exploiting insufficient validation of file system paths. This type of flaw typically involves improper sanitization or verification of path inputs, which can be manipulated to bypass security controls and execute code with elevated privileges. The vulnerability affects multiple recent versions of macOS, including macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, with patches released to address the issue by improving path validation mechanisms. Although the exact affected versions prior to these patched releases are unspecified, the vulnerability is significant because it enables an unprivileged app to escalate its privileges to root, potentially compromising the entire system. No known exploits are currently reported in the wild, and no CVSS score has been assigned yet. However, the nature of the vulnerability suggests that exploitation would not require user interaction once an app is installed or executed, and it could lead to full system compromise, including unauthorized access to sensitive data, system integrity breaches, and disruption of availability.

Detailed information about CVE-2025-43196: An app may be able to gain root privileges in Apple macOS affecting Apple macOS. Get real-time updates, technical det

CVE-2025-43196: An app may be able to gain root privileges in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43196: An app may be able to gain root privileges in Apple macOS

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service.

CVE-2025-43191 is a vulnerability identified in Apple macOS operating systems, specifically addressed in versions macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The root cause of the vulnerability is a path handling issue that allows an application to cause a denial-of-service (DoS) condition. The vulnerability arises from insufficient validation of file system paths, which can be exploited by a malicious or compromised app to trigger a system crash or otherwise disrupt normal OS operations, leading to unavailability of services or system instability. Although the exact technical mechanism is not detailed, path handling vulnerabilities typically involve improper sanitization or validation of input paths, which can cause buffer overflows, infinite loops, or resource exhaustion. This vulnerability does not require user interaction beyond app execution and does not require elevated privileges, making it potentially exploitable by any app running on the system. The issue has been addressed by Apple through improved validation in the specified macOS versions. There are no known exploits in the wild at the time of publication, and no CVSS score has been assigned yet. The vulnerability affects unspecified versions prior to the patched releases, implying a broad impact across multiple macOS versions used in production environments.

Detailed information about CVE-2025-43191: An app may be able to cause a denial-of-service in Apple macOS affecting Apple macOS. Get real-time updates, technica

CVE-2025-43191: An app may be able to cause a denial-of-service in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43191: An app may be able to cause a denial-of-service in Apple macOS

A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one user is logged in at the same time.

CVE-2025-43276 is a logic error vulnerability affecting Apple's macOS operating system, specifically related to the iCloud Private Relay feature. iCloud Private Relay is designed to enhance user privacy by routing internet traffic through multiple relays, thereby obscuring user IP addresses and location data from websites and network providers. The vulnerability arises when more than one user is logged into the same macOS device simultaneously, a scenario common in shared or multi-user environments. Under these conditions, iCloud Private Relay may fail to activate properly due to inadequate error handling in the system's logic. This failure could result in user traffic not being routed through the privacy-preserving relays, potentially exposing user IP addresses and browsing activity to network observers or websites. The issue has been addressed in macOS Sequoia 15.6 with improved error handling to ensure iCloud Private Relay activates correctly even when multiple users are logged in concurrently. There are no known exploits in the wild at this time, and the affected versions are unspecified beyond being prior to the patched release. The absence of a CVSS score indicates that the vulnerability's impact and exploitability have not been formally quantified yet.

Detailed information about CVE-2025-43276: iCloud Private Relay may not activate when more than one user is logged in at the same time in Apple macOS affecting 

CVE-2025-43276: iCloud Private Relay may not activate when more than one user is logged in at the same time in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Affecting Denmark

Filter Threats

Threats Affecting Denmark

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility