Blog - Lupus Nova

Advisories
Home

Contact

Copyright © 2024-2026 Lupus Nova

Now Loading ...

All Posts

2 CVE found in Apple products (macOS, iOS, watchOS & visionOS)
Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in Books Books Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to modify protected parts of the file system Description: A race condition was addressed with improved checks. CVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova CVE in Contacts Contacts Available for: macOS Tahoe Impact: An app may be able to add contacts without user authorization Description: An authorization issue was addressed with improved validation. CVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel Febrero Links Apple Security Advisory iOS 26.6 and iPadOS 26.6 Apple Security Advisory macOS Tahoe 26.6 Apple Security Advisory watchOS 26.6 Apple Security Advisory visionOS 26.6 NIST entry CVE-2026-43811 NIST entry CVE-2026-64746
Advisories · 2026-07-28
2 CVE found in Apple products (macOS)
Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in MigrationKit MigrationKit Available for: macOS Tahoe Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved handling of symlinks. CVE-2026-20694: Rodolphe Brunetti (@eisw0lf) of Lupus Nova CVE in Music Music Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-20632: Rodolphe Brunetti (@eisw0lf) of Lupus Nova Links Apple Security Advisory macOS Tahoe 26.4 Apple Security Advisory macOS Sequoia 15.7.5 Apple Security Advisory macOS Sonoma 14.8.5 NIST entry CVE-2026-20694 NIST entry CVE-2026-20632
Advisories · 2026-03-25
3 CVE found in Apple products (macOS)
Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in Dock Dock Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A race condition was addressed with improved state handling. CVE-2025-43420: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova CVE in SoftwareUpdate SoftwareUpdate Available for: macOS Tahoe Impact: An app with root privileges may be able to access private information Description: A permissions issue was addressed with additional restrictions. CVE-2025-43336: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova CVE in StorageKit StorageKit Available for: macOS Tahoe Impact: An app may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. CVE-2025-43351: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova Links Apple Security Advisory macOS Tahoe 26.1 Apple Security Advisory macOS Sequoia 15.7.2 Apple Security Advisory macOS Sonoma 14.8.2 NIST entry CVE-2025-43420 NIST entry CVE-2025-43336 NIST entry CVE-2025-43351
Advisories · 2025-11-04
4 CVE found in Apple products (macOS)
Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in Archive Utility Archive Utility Available for: Mac Studio (2022 and later), iMac (2020 and later), Mac Pro (2019 and later), Mac mini (2020 and later), MacBook Air with Apple silicon (2020 and later), MacBook Pro (16-inch, 2019), MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports), and MacBook Pro with Apple silicon (2020 and later) Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved validation of symlinks. CVE-2025-43288: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova CVE in MigrationKit MigrationKit Available for: Mac Studio (2022 and later), iMac (2020 and later), Mac Pro (2019 and later), Mac mini (2020 and later), MacBook Air with Apple silicon (2020 and later), MacBook Pro (16-inch, 2019), MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports), and MacBook Pro with Apple silicon (2020 and later) Impact: An app may be able to access user-sensitive data Description: This issue was addressed by removing the vulnerable code. CVE-2025-43315: Rodolphe Brunetti (@eisw0lf) of Lupus Nova CVE in Music Music Available for: Mac Studio (2022 and later), iMac (2020 and later), Mac Pro (2019 and later), Mac mini (2020 and later), MacBook Air with Apple silicon (2020 and later), MacBook Pro (16-inch, 2019), MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports), and MacBook Pro with Apple silicon (2020 and later) Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved entitlements. CVE-2025-43207: Rodolphe Brunetti (@eisw0lf) of Lupus Nova, an anonymous researcher CVE in Spotlight Spotlight Available for: Mac Studio (2022 and later), iMac (2020 and later), Mac Pro (2019 and later), Mac mini (2020 and later), MacBook Air with Apple silicon (2020 and later), MacBook Pro (16-inch, 2019), MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports), and MacBook Pro with Apple silicon (2020 and later) Impact: An app may be able to access sensitive user data Description: A logic issue was addressed with improved checks. CVE-2025-24197: Rodolphe Brunetti (@eisw0lf) of Lupus Nova Links Apple Security Advisory macOS Tahoe 26 Apple Security Advisory macOS Sequoia 15.7 Apple Security Advisory macOS Sonoma 14.8 NIST entry CVE-2025-43288 NIST entry CVE-2025-43315 NIST entry CVE-2025-43207 NIST entry CVE-2025-24197
Advisories · 2025-09-16
2 CVE found in Apple products (macOS)
Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in Dock Dock Available for: macOS Sequoia Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing the vulnerable code. CVE-2025-31187: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova CVE in FeedbackLogger FeedbackLogger Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved data protection. CVE-2025-24281: Rodolphe BRUNETTI (@eisw0lf) Links Apple Security Advisory macOS Sequoia 15.4 Apple Security Advisory macOS Sonoma 14.7.5 Apple Security Advisory macOS Ventura 13.7.5 NIST entry CVE-2025-31187 NIST entry CVE-2025-24281
Advisories · 2025-04-01
1 CVE found in Apple products (macOS)
Rodolphe BRUNETTI found a vulnerability, patched in the latest Apple update : CVE in Spotlight Spotlight Available for: macOS Sequoia Impact: A malicious application may be able to leak sensitive user information Description: This issue was addressed through improved state management. CVE-2025-24138: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova Links Apple Security Advisory macOS Sequoia 15.3 Apple Security Advisory macOS Sonoma 14.7.3 Apple Security Advisory macOS Ventura 13.7.3 NIST entry CVE-2025-24138
Advisories · 2025-01-28
2 CVE found in Apple products (macOS)
Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in Dock Dock Available for: macOS Sequoia Impact: An app may be able to access protected user data Description: The issue was addressed with improved checks. CVE-2024-54547: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova CVE in System Settings System Settings Available for: macOS Sequoia Impact: An app may be able to overwrite arbitrary files Description: A path handling issue was addressed with improved validation. CVE-2024-54520: Rodolphe BRUNETTI (@eisw0lf) Links Apple Security Advisory macOS Sequoia 15.2 Apple Security Advisory macOS Sonoma 14.7.2 Apple Security Advisory macOS Ventura 13.7.2 NIST entry CVE-2024-54547 NIST entry CVE-2024-54520
Advisories · 2024-12-12
1 CVE found in Apple products (macOS / iOS / visionOS/ watchOS)
Our vulnerability researcher Rodolphe BRUNETTI found one vulnerability, patched in the latest Apple update : CVE in Siri Siri Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved redaction of sensitive information. CVE-2024-44194: Rodolphe Brunetti (@eisw0lf) Links Apple Security Advisory iOS 18.1 NIST entry
Advisories · 2024-10-29
3 CVE found in Apple products (macOS & iOS)
Our vulnerability researcher Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in System Settings System Settings Available for: Mac Studio (2022 and later), iMac (2019 and later), Mac Pro (2019 and later), Mac Mini (2018 and later), MacBook Air (2020 and later), MacBook Pro (2018 and later), and iMac Pro (2017 and later) Impact: An app may be able to read arbitrary files Description: A path handling issue was addressed with improved validation. CVE-2024-44190: Rodolphe BRUNETTI (@eisw0lf) CVE in Mail Accounts Mail Accounts Available for: Mac Studio (2022 and later), iMac (2019 and later), Mac Pro (2019 and later), Mac Mini (2018 and later), MacBook Air (2020 and later), MacBook Pro (2018 and later), and iMac Pro (2017 and later) Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries. CVE-2024-40791: Rodolphe BRUNETTI (@eisw0lf) CVE in Siri Siri Available for: Mac Studio (2022 and later), iMac (2019 and later), Mac Pro (2019 and later), Mac Mini (2018 and later), MacBook Air (2020 and later), MacBook Pro (2018 and later), and iMac Pro (2017 and later) Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed by moving sensitive data to a more secure location. CVE-2024-44170: K宝, LFY (@secsys), Smi1e, yulige, Cristian Dinca (icmd.tech), Rodolphe BRUNETTI (@eisw0lf) Links Apple Security Advisory macOS 15 Apple Security Advisory iOS 18 NIST entry CVE-2024-40791 NIST entry CVE-2024-44170 NIST entry CVE-2024-44190
Advisories · 2024-09-20
1 CVE found in Apple products (macOS)
Our vulnerability researcher Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update : CVE in Messages Messages Available for: macOS Sonoma Impact: An app may be able to view a contact's phone number in system logs Description: The issue was addressed with improved checks. CVE-2024-40832: Rodolphe BRUNETTI (@eisw0lf) Links Apple Security Advisory NIST entry
Advisories · 2024-08-01

Touch background to close