Dec 15, 2025

Started

• ClosedHigh✓Patched

  Apple Multiple Products: Multiple Products Use-After-Free WebKit Vulnerability

  Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2025-12-15.

  Apple Multiple Products·Closed Dec 15, 2025·updated Dec 15, 2025

• ClosedHigh✓Patched

  Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability

  Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. Added to CISA KEV on 2025-12-15.

  Gladinet CentreStack and Triofox·Closed Dec 15, 2025·updated Dec 15, 2025