Apr 17, 2025

Started

• Closed✓Patched

  Apple Multiple Products: 2 exploited vulnerabilities (CVE-2025-31200, CVE-2025-31201)

  CVE-2025-31200: Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file. CVE-2025-31201: Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication. Added to CISA KEV on 2025-04-17.

  Apple Multiple Products·Closed Apr 17, 2025·updated Apr 17, 2025

• Closed✓Patched

  Microsoft Windows: Windows NTLM Hash Disclosure Spoofing Vulnerability

  Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network. Added to CISA KEV on 2025-04-17.

  Microsoft Windows·Closed Apr 17, 2025·updated Apr 17, 2025