{
  "affected": [],
  "aliases": [
    "CVE-2025-32462"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-863"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-30T21:15:30Z",
    "severity": "LOW"
  },
  "details": "Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.",
  "id": "GHSA-c5x2-97hm-x895",
  "modified": "2025-11-03T21:34:05Z",
  "published": "2025-06-30T21:30:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32462"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/cve-2025-32462"
    },
    {
      "type": "WEB",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32462"
    },
    {
      "type": "WEB",
      "url": "https://explore.alas.aws.amazon.com/CVE-2025-32462.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00033.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-security-announce/2025/msg00118.html"
    },
    {
      "type": "WEB",
      "url": "https://security-tracker.debian.org/tracker/CVE-2025-32462"
    },
    {
      "type": "WEB",
      "url": "https://ubuntu.com/security/notices/USN-7604-1"
    },
    {
      "type": "WEB",
      "url": "https://www.openwall.com/lists/oss-security/2025/06/30/2"
    },
    {
      "type": "WEB",
      "url": "https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463"
    },
    {
      "type": "WEB",
      "url": "https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host"
    },
    {
      "type": "WEB",
      "url": "https://www.sudo.ws/releases/changelog"
    },
    {
      "type": "WEB",
      "url": "https://www.sudo.ws/security/advisories"
    },
    {
      "type": "WEB",
      "url": "https://www.sudo.ws/security/advisories/host_any"
    },
    {
      "type": "WEB",
      "url": "https://www.suse.com/security/cve/CVE-2025-32462.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-32462.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL",
    "tracking": {
      "current_release_date": "2026-02-18T01:23:11.000Z",
      "generator": {
        "date": "2026-02-18T13:34:41.687Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2025-32462",
      "initial_release_date": "2025-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-07-11T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2025-07-17T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added sudo to CBL-Mariner 2.0\nAdded sudo to Azure Linux 3.0"
        },
        {
          "date": "2026-02-18T01:23:11.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              },
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm2 sudo 1.9.17-1",
                "product": {
                  "name": "\u003ccm2 sudo 1.9.17-1",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version",
                "name": "cm2 sudo 1.9.17-1",
                "product": {
                  "name": "cm2 sudo 1.9.17-1",
                  "product_id": "19550"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 sudo 1.9.17-1",
                "product": {
                  "name": "\u003cazl3 sudo 1.9.17-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 sudo 1.9.17-1",
                "product": {
                  "name": "azl3 sudo 1.9.17-1",
                  "product_id": "19595"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 sudo 1.9.17-1",
                "product": {
                  "name": "\u003ccbl2 sudo 1.9.17-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 sudo 1.9.17-1",
                "product": {
                  "name": "cbl2 sudo 1.9.17-1",
                  "product_id": "20260"
                }
              }
            ],
            "category": "product_name",
            "name": "sudo"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm2 sudo 1.9.17-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm2 sudo 1.9.17-1 as a component of CBL Mariner 2.0",
          "product_id": "19550-17086"
        },
        "product_reference": "19550",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 sudo 1.9.17-1 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 sudo 1.9.17-1 as a component of Azure Linux 3.0",
          "product_id": "19595-17084"
        },
        "product_reference": "19595",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 sudo 1.9.17-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 sudo 1.9.17-1 as a component of CBL Mariner 2.0",
          "product_id": "20260-17086"
        },
        "product_reference": "20260",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-32462",
      "notes": [
        {
          "category": "general",
          "text": "mitre",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "19550-17086",
          "19595-17084",
          "20260-17086"
        ],
        "known_affected": [
          "17086-3",
          "17084-2",
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-32462.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-07-11T00:00:00.000Z",
          "details": "1.9.17-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-3",
            "17084-2",
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "temporalScore": 2.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "17086-3",
            "17084-2",
            "17086-1"
          ]
        }
      ],
      "title": "Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft kwetsbaarheden verholpen in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2 en MacOS Tahoe 26.1.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden omvatten een breed scala aan problemen, waaronder ongeautoriseerde toegang tot gevoelige gebruikersdata, racecondities, en logische fouten die konden leiden tot ongewenste toegang of systeeminstabiliteit. Aanvallers konden deze kwetsbaarheden misbruiken door gebruik te maken van onjuiste validatieprocessen en beveiligingslekken in de sandbox-omgeving. De impact varieerde van gegevenslekken tot potenti\u00eble systeemcrashes, wat de noodzaak van onmiddellijke aandacht benadrukte.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen, waaronder verbeterde validatieprocessen, extra restricties in de sandbox-omgeving, en verbeteringen in het geheugenbeheer. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "UNIX Symbolic Link (Symlink) Following",
        "title": "CWE-61"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "CWE-265",
        "title": "CWE-265"
      },
      {
        "category": "general",
        "text": "CWE-275",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Incorrect Default Permissions",
        "title": "CWE-276"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
        "title": "CWE-444"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information into Log File",
        "title": "CWE-532"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)",
        "title": "CWE-776"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Inefficient Regular Expression Complexity",
        "title": "CWE-1333"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/125636"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple MacOS",
    "tracking": {
      "current_release_date": "2025-11-04T12:44:25.439757Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2025-0351",
      "initial_release_date": "2025-11-04T12:44:25.439757Z",
      "revision_history": [
        {
          "date": "2025-11-04T12:44:25.439757Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Mac OS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Sequoia"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Sonoma"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "macOS Tahoe"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-43398",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)",
          "title": "CWE-776"
        },
        {
          "category": "description",
          "text": "The REXML gem has multiple denial of service vulnerabilities, particularly affecting versions prior to 3.3.6, with updates addressing these issues in version 3.3.9.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-43398 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-43398.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2024-43398"
    },
    {
      "cve": "CVE-2024-49761",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inefficient Regular Expression Complexity",
          "title": "CWE-1333"
        },
        {
          "category": "description",
          "text": "REXML gem versions prior to 3.3.9 have a ReDoS vulnerability affecting Ruby 3.1 and earlier, with patches available in newer versions, while ruby2.5 also addresses related vulnerabilities in WEBrick and URI handling.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-49761 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-49761.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2024-49761"
    },
    {
      "cve": "CVE-2025-6442",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
          "title": "CWE-444"
        },
        {
          "category": "description",
          "text": "The Ruby WEBrick read_header HTTP Request Smuggling Vulnerability (CVE-2025-6442) allows remote attackers to exploit affected installations behind specific HTTP proxies, alongside userinfo leakage issues (CVE-2025-27221).",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-6442 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-6442.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-6442"
    },
    {
      "cve": "CVE-2025-30465",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Default Permissions",
          "title": "CWE-276"
        },
        {
          "category": "description",
          "text": "A permissions issue in macOS and iPadOS that allowed shortcuts to access restricted files has been resolved through enhanced validation measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30465 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-30465.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-30465"
    },
    {
      "cve": "CVE-2025-31199",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insertion of Sensitive Information into Log File",
          "title": "CWE-532"
        },
        {
          "category": "description",
          "text": "A logging issue allowing app access to sensitive user data has been resolved through enhanced data redaction in iOS 18.4, iPadOS 18.4, visionOS 2.4, and macOS Sequoia 15.4.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-31199 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31199.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-31199"
    },
    {
      "cve": "CVE-2025-32462",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        },
        {
          "category": "description",
          "text": "A privilege escalation vulnerability in Sudo affects versions 1.8.8 to 1.9.17, allowing unauthorized users to gain elevated privileges through misconfigured sudoers files, particularly in shared environments.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-32462 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-32462.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-32462"
    },
    {
      "cve": "CVE-2025-43292",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "description",
          "text": "macOS Sequoia 15.7 and 15.7.2 have addressed a race condition that could allow unauthorized access to sensitive user data through enhanced state handling mechanisms.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43292 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43292.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-43292"
    },
    {
      "cve": "CVE-2025-43322",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a logic issue that could allow unauthorized access to user-sensitive data through enhanced checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43322 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43322.json"
        }
      ],
      "title": "CVE-2025-43322"
    },
    {
      "cve": "CVE-2025-43334",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved unauthorized access to user-sensitive data through the implementation of additional entitlement checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43334 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43334.json"
        }
      ],
      "title": "CVE-2025-43334"
    },
    {
      "cve": "CVE-2025-43335",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved unauthorized access to user-sensitive data by implementing additional logic.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43335 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43335.json"
        }
      ],
      "title": "CVE-2025-43335"
    },
    {
      "cve": "CVE-2025-43336",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a permissions issue that allowed root-privileged apps to access private information through additional restrictions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43336 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43336.json"
        }
      ],
      "title": "CVE-2025-43336"
    },
    {
      "cve": "CVE-2025-43337",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 has addressed an access issue related to sensitive user data by implementing additional sandbox restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43337 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43337.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-43337"
    },
    {
      "cve": "CVE-2025-43338",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds access vulnerability affecting macOS Sonoma 14.8.2, iOS 26, and iPadOS 26 was fixed, which could lead to unexpected app termination or memory corruption when handling malicious media files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43338 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43338.json"
        }
      ],
      "title": "CVE-2025-43338"
    },
    {
      "cve": "CVE-2025-43348",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a logic issue that allowed apps to bypass Gatekeeper checks through improved validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43348 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43348.json"
        }
      ],
      "title": "CVE-2025-43348"
    },
    {
      "cve": "CVE-2025-43351",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue was addressed through the implementation of additional restrictions to enhance security controls.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43351 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43351.json"
        }
      ],
      "title": "CVE-2025-43351"
    },
    {
      "cve": "CVE-2025-43361",
      "notes": [
        {
          "category": "description",
          "text": "Apple has addressed an out-of-bounds read vulnerability in multiple operating systems through enhanced bounds checking, preventing potential access to kernel memory by malicious applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43361 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43361.json"
        }
      ],
      "title": "CVE-2025-43361"
    },
    {
      "cve": "CVE-2025-43364",
      "notes": [
        {
          "category": "description",
          "text": "A race condition that could allow an application to escape its sandbox has been addressed in macOS Sonoma 14.8 and macOS Sequoia 15.7 through enhanced validation measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43364 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43364.json"
        }
      ],
      "title": "CVE-2025-43364"
    },
    {
      "cve": "CVE-2025-43372",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "description",
          "text": "Recent updates in tvOS 26 and iOS 26 have addressed a vulnerability related to potential app termination or memory corruption caused by malicious media files through enhanced input validation.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43372 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43372.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-43372"
    },
    {
      "cve": "CVE-2025-43373",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed issues related to unexpected system termination and kernel memory corruption through improved memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43373 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43373.json"
        }
      ],
      "title": "CVE-2025-43373"
    },
    {
      "cve": "CVE-2025-43377",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 addressed an out-of-bounds read vulnerability through enhanced bounds checking, which could lead to potential denial-of-service by an application.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43377 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43377.json"
        }
      ],
      "title": "CVE-2025-43377"
    },
    {
      "cve": "CVE-2025-43378",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 has resolved a permissions issue that previously allowed unauthorized access to sensitive user data by implementing additional restrictions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43378 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43378.json"
        }
      ],
      "title": "CVE-2025-43378"
    },
    {
      "cve": "CVE-2025-43379",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in visionOS 26.1 and various macOS, watchOS, iOS, iPadOS, and tvOS versions have enhanced symlink validation to prevent unauthorized access to protected user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43379 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43379.json"
        }
      ],
      "title": "CVE-2025-43379"
    },
    {
      "cve": "CVE-2025-43380",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed an out-of-bounds write vulnerability that could lead to unexpected application termination through improved input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43380 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43380.json"
        }
      ],
      "title": "CVE-2025-43380"
    },
    {
      "cve": "CVE-2025-43381",
      "notes": [
        {
          "category": "description",
          "text": "The issue was addressed by improving the management of symlinks to enhance system integrity and security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43381 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43381.json"
        }
      ],
      "title": "CVE-2025-43381"
    },
    {
      "cve": "CVE-2025-43382",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 addressed a parsing issue in directory path handling, enhancing path validation to prevent potential unauthorized access to sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43382 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43382.json"
        }
      ],
      "title": "CVE-2025-43382"
    },
    {
      "cve": "CVE-2025-43383",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43383 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43383.json"
        }
      ],
      "title": "CVE-2025-43383"
    },
    {
      "cve": "CVE-2025-43384",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43384 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43384.json"
        }
      ],
      "title": "CVE-2025-43384"
    },
    {
      "cve": "CVE-2025-43385",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems addressed an out-of-bounds access issue that could lead to unexpected app termination or memory corruption when handling malicious media files through improved bounds checking.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43385 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43385.json"
        }
      ],
      "title": "CVE-2025-43385"
    },
    {
      "cve": "CVE-2025-43386",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1 addressed an out-of-bounds access vulnerability that could lead to app crashes or memory corruption when handling malicious media files, with improved bounds checking implemented.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43386 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43386.json"
        }
      ],
      "title": "CVE-2025-43386"
    },
    {
      "cve": "CVE-2025-43387",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 has addressed a permissions issue that could allow malicious applications to gain root privileges through the implementation of additional restrictions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43387 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43387.json"
        }
      ],
      "title": "CVE-2025-43387"
    },
    {
      "cve": "CVE-2025-43388",
      "notes": [
        {
          "category": "description",
          "text": "An injection vulnerability was effectively mitigated through the implementation of enhanced validation measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43388 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43388.json"
        }
      ],
      "title": "CVE-2025-43388"
    },
    {
      "cve": "CVE-2025-43389",
      "notes": [
        {
          "category": "description",
          "text": "A privacy vulnerability in iOS 26.1 and macOS Sequoia 15.7.2 was resolved by removing code that could have allowed unauthorized access to sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43389 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43389.json"
        }
      ],
      "title": "CVE-2025-43389"
    },
    {
      "cve": "CVE-2025-43390",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 resolves a downgrade issue on Intel-based Mac computers by implementing enhanced code-signing restrictions to protect user-sensitive data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43390 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43390.json"
        }
      ],
      "title": "CVE-2025-43390"
    },
    {
      "cve": "CVE-2025-43391",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1, iPadOS 26.1, macOS Sonoma 14.8.2, and macOS Sequoia 15.7.2 have resolved a privacy issue related to the handling of temporary files that could have allowed unauthorized access to sensitive user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43391 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43391.json"
        }
      ],
      "title": "CVE-2025-43391"
    },
    {
      "cve": "CVE-2025-43392",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.1 and related operating systems have resolved cross-origin image data exfiltration issues through improved cache handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43392 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43392.json"
        }
      ],
      "title": "CVE-2025-43392"
    },
    {
      "cve": "CVE-2025-43393",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue was addressed by enhancing restrictions within the sandbox environment to improve security controls.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43393 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43393.json"
        }
      ],
      "title": "CVE-2025-43393"
    },
    {
      "cve": "CVE-2025-43394",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved an issue related to the handling of symlinks that previously allowed applications to access protected user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43394 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43394.json"
        }
      ],
      "title": "CVE-2025-43394"
    },
    {
      "cve": "CVE-2025-43395",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved an issue related to the handling of symlinks that previously allowed applications to access protected user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43395 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43395.json"
        }
      ],
      "title": "CVE-2025-43395"
    },
    {
      "cve": "CVE-2025-43396",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a logic issue that could allow sandboxed apps to access sensitive user data through enhanced checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43396 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43396.json"
        }
      ],
      "title": "CVE-2025-43396"
    },
    {
      "cve": "CVE-2025-43397",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 addressed a permissions vulnerability that could lead to denial-of-service by removing the associated vulnerable code.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43397 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43397.json"
        }
      ],
      "title": "CVE-2025-43397"
    },
    {
      "cve": "CVE-2025-43398",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in visionOS 26.1 and macOS Sonoma 14.8.2 have resolved unexpected system termination issues caused by memory handling through improved memory management techniques.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43398 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43398.json"
        }
      ],
      "title": "CVE-2025-43398"
    },
    {
      "cve": "CVE-2025-43399",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 has addressed unauthorized access to protected user data through enhanced redaction measures, significantly reducing the risk of sensitive information exposure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43399 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43399.json"
        }
      ],
      "title": "CVE-2025-43399"
    },
    {
      "cve": "CVE-2025-43401",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 addressed a denial-of-service vulnerability through enhanced validation, preventing potential exploitation by remote attackers.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43401 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43401.json"
        }
      ],
      "title": "CVE-2025-43401"
    },
    {
      "cve": "CVE-2025-43402",
      "notes": [
        {
          "category": "description",
          "text": "The issue was addressed through improvements in memory management techniques.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43402 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43402.json"
        }
      ],
      "title": "CVE-2025-43402"
    },
    {
      "cve": "CVE-2025-43404",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue was addressed by enhancing restrictions within the sandbox environment to improve security controls.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43404 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43404.json"
        }
      ],
      "title": "CVE-2025-43404"
    },
    {
      "cve": "CVE-2025-43405",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 addressed a permissions issue related to user-sensitive data through enhanced sandbox restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43405 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43405.json"
        }
      ],
      "title": "CVE-2025-43405"
    },
    {
      "cve": "CVE-2025-43406",
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was resolved through the implementation of enhanced restrictions, improving system integrity and security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43406 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43406.json"
        }
      ],
      "title": "CVE-2025-43406"
    },
    {
      "cve": "CVE-2025-43407",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates to visionOS 26.1 and various macOS, iOS, and tvOS versions have resolved the issue of apps potentially breaking out of their sandbox through improved entitlements.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43407 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43407.json"
        }
      ],
      "title": "CVE-2025-43407"
    },
    {
      "cve": "CVE-2025-43408",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved unauthorized access to contacts from the lock screen by restricting available options, enhancing device security.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43408 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43408.json"
        }
      ],
      "title": "CVE-2025-43408"
    },
    {
      "cve": "CVE-2025-43409",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 addressed a permissions issue that allowed applications to access sensitive user data by implementing additional sandbox restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43409 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43409.json"
        }
      ],
      "title": "CVE-2025-43409"
    },
    {
      "cve": "CVE-2025-43411",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved unauthorized access to user-sensitive data through the implementation of additional entitlement checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43411 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43411.json"
        }
      ],
      "title": "CVE-2025-43411"
    },
    {
      "cve": "CVE-2025-43412",
      "notes": [
        {
          "category": "description",
          "text": "The file quarantine bypass issue, which allowed applications to escape their sandbox, has been resolved in macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 through the implementation of additional checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43412 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43412.json"
        }
      ],
      "title": "CVE-2025-43412"
    },
    {
      "cve": "CVE-2025-43413",
      "notes": [
        {
          "category": "description",
          "text": "An access issue related to sandbox restrictions has been resolved in visionOS 26.1 and macOS Sonoma 14.8.2, enabling sandboxed apps to observe system-wide network connections through additional restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43413 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43413.json"
        }
      ],
      "title": "CVE-2025-43413"
    },
    {
      "cve": "CVE-2025-43414",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 addressed a permissions issue through enhanced validation, potentially allowing shortcuts to access restricted files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43414 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43414.json"
        }
      ],
      "title": "CVE-2025-43414"
    },
    {
      "cve": "CVE-2025-43420",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability was resolved in macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2, enhancing state handling to prevent unauthorized access to sensitive user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43420 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43420.json"
        }
      ],
      "title": "CVE-2025-43420"
    },
    {
      "cve": "CVE-2025-43421",
      "notes": [
        {
          "category": "description",
          "text": "Disabling array allocation sinking has resolved vulnerabilities in iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1, preventing unexpected process crashes from malicious web content.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43421 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43421.json"
        }
      ],
      "title": "CVE-2025-43421"
    },
    {
      "cve": "CVE-2025-43423",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, and visionOS 26.1 have resolved a logging issue that exposed sensitive user information through enhanced data redaction.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43423 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43423.json"
        }
      ],
      "title": "CVE-2025-43423"
    },
    {
      "cve": "CVE-2025-43424",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1 and iPadOS 26.1 have resolved a potential process crash vulnerability caused by a malicious HID device through the implementation of improved bounds checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43424 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43424.json"
        }
      ],
      "title": "CVE-2025-43424"
    },
    {
      "cve": "CVE-2025-43425",
      "notes": [
        {
          "category": "description",
          "text": "Apple has addressed the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced memory management techniques.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43425 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43425.json"
        }
      ],
      "title": "CVE-2025-43425"
    },
    {
      "cve": "CVE-2025-43426",
      "notes": [
        {
          "category": "description",
          "text": "A logging issue affecting sensitive user data was resolved in iOS 26.1 and iPadOS 26.1 through enhanced data redaction measures.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43426 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43426.json"
        }
      ],
      "title": "CVE-2025-43426"
    },
    {
      "cve": "CVE-2025-43427",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1, iPadOS 26.1, tvOS 26.1, Safari 26.1, and visionOS 26.1 have resolved unexpected process crashes caused by malicious web content through enhanced state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43427 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43427.json"
        }
      ],
      "title": "CVE-2025-43427"
    },
    {
      "cve": "CVE-2025-43429",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability was addressed in Safari and various Apple operating systems, including visionOS, watchOS, iOS, iPadOS, and tvOS versions 26.1, through enhanced bounds checking to prevent unexpected process crashes from malicious web content.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43429 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43429.json"
        }
      ],
      "title": "CVE-2025-43429"
    },
    {
      "cve": "CVE-2025-43430",
      "notes": [
        {
          "category": "description",
          "text": "Apple has resolved the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43430 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43430.json"
        }
      ],
      "title": "CVE-2025-43430"
    },
    {
      "cve": "CVE-2025-43431",
      "notes": [
        {
          "category": "description",
          "text": "Apple has addressed memory corruption vulnerabilities in Safari and iOS 26.1 through enhanced memory management techniques.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43431 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43431.json"
        }
      ],
      "title": "CVE-2025-43431"
    },
    {
      "cve": "CVE-2025-43432",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in various Apple operating systems was resolved through improved memory management, mitigating risks from potentially malicious web content.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43432 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43432.json"
        }
      ],
      "title": "CVE-2025-43432"
    },
    {
      "cve": "CVE-2025-43433",
      "notes": [
        {
          "category": "description",
          "text": "Apple has addressed memory corruption vulnerabilities in Safari and iOS 26.1 through enhanced memory management techniques.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43433 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43433.json"
        }
      ],
      "title": "CVE-2025-43433"
    },
    {
      "cve": "CVE-2025-43434",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43434 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43434.json"
        }
      ],
      "title": "CVE-2025-43434"
    },
    {
      "cve": "CVE-2025-43435",
      "notes": [
        {
          "category": "description",
          "text": "Apple has addressed the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced memory management techniques.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43435 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43435.json"
        }
      ],
      "title": "CVE-2025-43435"
    },
    {
      "cve": "CVE-2025-43436",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue allowing app enumeration of installed applications has been resolved with enhanced restrictions in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43436 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43436.json"
        }
      ],
      "title": "CVE-2025-43436"
    },
    {
      "cve": "CVE-2025-43438",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43438 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43438.json"
        }
      ],
      "title": "CVE-2025-43438"
    },
    {
      "cve": "CVE-2025-43440",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.1 and various Apple operating systems have resolved unexpected process crashes caused by malicious web content through enhanced verification measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43440 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43440.json"
        }
      ],
      "title": "CVE-2025-43440"
    },
    {
      "cve": "CVE-2025-43441",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1, iPadOS 26.1, tvOS 26.1, Safari 26.1, and visionOS 26.1 have addressed unexpected process crashes caused by malicious web content through enhanced memory management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43441 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43441.json"
        }
      ],
      "title": "CVE-2025-43441"
    },
    {
      "cve": "CVE-2025-43443",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.1 and various Apple operating systems have resolved unexpected process crashes caused by malicious web content through enhanced checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43443 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43443.json"
        }
      ],
      "title": "CVE-2025-43443"
    },
    {
      "cve": "CVE-2025-43444",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1 have resolved a permissions issue that could allow apps to fingerprint users through enhanced restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43444 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43444.json"
        }
      ],
      "title": "CVE-2025-43444"
    },
    {
      "cve": "CVE-2025-43445",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability was mitigated through enhanced input validation, impacting multiple operating systems and potentially causing application crashes or memory corruption when handling malicious media files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43445 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43445.json"
        }
      ],
      "title": "CVE-2025-43445"
    },
    {
      "cve": "CVE-2025-43446",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved the issue of apps modifying protected file system areas through enhanced symlink validation.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43446 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43446.json"
        }
      ],
      "title": "CVE-2025-43446"
    },
    {
      "cve": "CVE-2025-43447",
      "notes": [
        {
          "category": "description",
          "text": "The recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved issues related to unexpected system termination and kernel memory corruption through enhanced memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43447 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43447.json"
        }
      ],
      "title": "CVE-2025-43447"
    },
    {
      "cve": "CVE-2025-43448",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in visionOS 26.1 and macOS Sonoma 14.8.2 have resolved symlink vulnerabilities through enhanced validation, preventing potential sandbox breaches by applications.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43448 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43448.json"
        }
      ],
      "title": "CVE-2025-43448"
    },
    {
      "cve": "CVE-2025-43455",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved a privacy vulnerability that could allow malicious apps to capture sensitive information via screenshots through enhanced checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43455 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43455.json"
        }
      ],
      "title": "CVE-2025-43455"
    },
    {
      "cve": "CVE-2025-43457",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability affecting Safari and various Apple operating systems was addressed through improved memory management in the latest updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43457 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43457.json"
        }
      ],
      "title": "CVE-2025-43457"
    },
    {
      "cve": "CVE-2025-43458",
      "notes": [
        {
          "category": "description",
          "text": "Apple has resolved the issue of unexpected process crashes in Safari and iOS caused by malicious web content through enhanced state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43458 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43458.json"
        }
      ],
      "title": "CVE-2025-43458"
    },
    {
      "cve": "CVE-2025-43461",
      "notes": [
        {
          "category": "description",
          "text": "The issue was addressed by improving the symlink validation process to enhance security measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43461 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43461.json"
        }
      ],
      "title": "CVE-2025-43461"
    },
    {
      "cve": "CVE-2025-43462",
      "notes": [
        {
          "category": "description",
          "text": "The recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, tvOS 26.1, and visionOS 26.1 have resolved issues related to unexpected system termination and kernel memory corruption through enhanced memory handling.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43462 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43462.json"
        }
      ],
      "title": "CVE-2025-43462"
    },
    {
      "cve": "CVE-2025-43463",
      "notes": [
        {
          "category": "description",
          "text": "A parsing issue concerning directory paths was effectively addressed through improved path validation mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43463 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43463.json"
        }
      ],
      "title": "CVE-2025-43463"
    },
    {
      "cve": "CVE-2025-43464",
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service vulnerability was addressed through improved input validation techniques, enhancing the overall security posture.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43464 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43464.json"
        }
      ],
      "title": "CVE-2025-43464"
    },
    {
      "cve": "CVE-2025-43465",
      "notes": [
        {
          "category": "description",
          "text": "A parsing issue concerning directory paths was effectively addressed through improved path validation mechanisms.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43465 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43465.json"
        }
      ],
      "title": "CVE-2025-43465"
    },
    {
      "cve": "CVE-2025-43466",
      "notes": [
        {
          "category": "description",
          "text": "An injection vulnerability was effectively mitigated through the implementation of enhanced validation measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43466 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43466.json"
        }
      ],
      "title": "CVE-2025-43466"
    },
    {
      "cve": "CVE-2025-43467",
      "notes": [
        {
          "category": "description",
          "text": "The issue was resolved through the implementation of enhanced checks, ensuring improved security measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43467 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43467.json"
        }
      ],
      "title": "CVE-2025-43467"
    },
    {
      "cve": "CVE-2025-43468",
      "notes": [
        {
          "category": "description",
          "text": "New code-signing restrictions in macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved a downgrade issue on Intel-based Mac computers that previously allowed unauthorized access to sensitive user data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43468 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43468.json"
        }
      ],
      "title": "CVE-2025-43468"
    },
    {
      "cve": "CVE-2025-43469",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a permissions issue that previously allowed applications to access sensitive user data by implementing additional restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43469 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43469.json"
        }
      ],
      "title": "CVE-2025-43469"
    },
    {
      "cve": "CVE-2025-43471",
      "notes": [
        {
          "category": "description",
          "text": "The issue was resolved through the implementation of enhanced checks, ensuring improved security measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43471 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43471.json"
        }
      ],
      "title": "CVE-2025-43471"
    },
    {
      "cve": "CVE-2025-43472",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a validation issue related to input sanitization that could have allowed applications to gain root privileges.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43472 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43472.json"
        }
      ],
      "title": "CVE-2025-43472"
    },
    {
      "cve": "CVE-2025-43473",
      "notes": [
        {
          "category": "description",
          "text": "The issue was effectively resolved through the implementation of enhanced state management techniques.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43473 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43473.json"
        }
      ],
      "title": "CVE-2025-43473"
    },
    {
      "cve": "CVE-2025-43474",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved an out-of-bounds read issue that could lead to system termination or unauthorized kernel memory access through enhanced input validation.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43474 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43474.json"
        }
      ],
      "title": "CVE-2025-43474"
    },
    {
      "cve": "CVE-2025-43476",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a permissions issue that could allow an app to escape its sandbox through the implementation of additional restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43476 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43476.json"
        }
      ],
      "title": "CVE-2025-43476"
    },
    {
      "cve": "CVE-2025-43477",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved a privacy issue concerning sensitive user data access through enhanced private data redaction for both user data and log entries.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43477 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43477.json"
        }
      ],
      "title": "CVE-2025-43477"
    },
    {
      "cve": "CVE-2025-43478",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a use after free issue related to memory management, preventing unexpected app-related system terminations.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43478 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43478.json"
        }
      ],
      "title": "CVE-2025-43478"
    },
    {
      "cve": "CVE-2025-43479",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have addressed a permissions issue that previously allowed applications to access sensitive user data by implementing additional restrictions.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43479 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43479.json"
        }
      ],
      "title": "CVE-2025-43479"
    },
    {
      "cve": "CVE-2025-43480",
      "notes": [
        {
          "category": "description",
          "text": "Apple has resolved a data exfiltration issue in Safari and iOS through enhanced checks to prevent potential threats from malicious websites.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43480 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43480.json"
        }
      ],
      "title": "CVE-2025-43480"
    },
    {
      "cve": "CVE-2025-43481",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sequoia 15.7.2 has resolved the issue of applications potentially escaping their sandbox through enhanced verification measures.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43481 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43481.json"
        }
      ],
      "title": "CVE-2025-43481"
    },
    {
      "cve": "CVE-2025-43493",
      "notes": [
        {
          "category": "description",
          "text": "iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1 have resolved the address bar spoofing issue through enhanced verification measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43493 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43493.json"
        }
      ],
      "title": "CVE-2025-43493"
    },
    {
      "cve": "CVE-2025-43496",
      "notes": [
        {
          "category": "description",
          "text": "The issue of remote content loading despite the \u0027Load Remote Images\u0027 setting being off has been resolved in watchOS 26.1 and iOS 26.1 through the implementation of additional logic.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43496 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43496.json"
        }
      ],
      "title": "CVE-2025-43496"
    },
    {
      "cve": "CVE-2025-43497",
      "notes": [
        {
          "category": "description",
          "text": "An access issue was resolved by implementing additional restrictions in the sandbox environment to enhance security measures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43497 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43497.json"
        }
      ],
      "title": "CVE-2025-43497"
    },
    {
      "cve": "CVE-2025-43498",
      "notes": [
        {
          "category": "description",
          "text": "An authorization issue concerning sensitive user data access has been resolved through enhanced state management in iOS 26.1 and macOS Sequoia 15.7.2.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43498 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43498.json"
        }
      ],
      "title": "CVE-2025-43498"
    },
    {
      "cve": "CVE-2025-43499",
      "notes": [
        {
          "category": "description",
          "text": "macOS Sonoma 14.8.2 and macOS Sequoia 15.7.2 have resolved the issue of potential sensitive user data access through the implementation of additional entitlement checks.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43499 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43499.json"
        }
      ],
      "title": "CVE-2025-43499"
    },
    {
      "cve": "CVE-2025-43500",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 have resolved a privacy issue regarding user preferences, enhancing the protection of sensitive user data from app access.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43500 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43500.json"
        }
      ],
      "title": "CVE-2025-43500"
    },
    {
      "cve": "CVE-2025-43502",
      "notes": [
        {
          "category": "description",
          "text": "Recent updates in iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1 addressed a privacy issue by removing sensitive data to prevent the bypassing of privacy preferences.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43502 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43502.json"
        }
      ],
      "title": "CVE-2025-43502"
    },
    {
      "cve": "CVE-2025-43503",
      "notes": [
        {
          "category": "description",
          "text": "An inconsistent user interface issue related to state management has been resolved across multiple operating systems, including watchOS, iOS, iPadOS, Safari, and visionOS, addressing potential spoofing risks from malicious websites.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43503 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43503.json"
        }
      ],
      "title": "CVE-2025-43503"
    },
    {
      "cve": "CVE-2025-43506",
      "notes": [
        {
          "category": "description",
          "text": "A logic error was addressed by improving the error handling process, enhancing overall system reliability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43506 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43506.json"
        }
      ],
      "title": "CVE-2025-43506"
    },
    {
      "cve": "CVE-2025-43507",
      "notes": [
        {
          "category": "description",
          "text": "A privacy issue related to user fingerprinting was resolved in watchOS 26.1, iOS 26.1, iPadOS 26.1, and visionOS 26.1 by relocating sensitive data.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-43507 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43507.json"
        }
      ],
      "title": "CVE-2025-43507"
    },
    {
      "cve": "CVE-2025-53906",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "Vim version 9.1.1629 addresses multiple vulnerabilities, including path traversal issues in the tar.vim and zip.vim plugins, as well as memory management errors.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-53906 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53906.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4"
          ]
        }
      ],
      "title": "CVE-2025-53906"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "sudo-1.9.17p1-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the sudo-1.9.17p1-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15298",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15298-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-32462 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-32462/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-32463 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-32463/"
      }
    ],
    "title": "sudo-1.9.17p1-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-07-03T00:00:00Z",
      "generator": {
        "date": "2025-07-03T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15298-1",
      "initial_release_date": "2025-07-03T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-07-03T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "sudo-1.9.17p1-1.1.aarch64",
                  "product_id": "sudo-1.9.17p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "sudo-devel-1.9.17p1-1.1.aarch64",
                  "product_id": "sudo-devel-1.9.17p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-plugin-python-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "sudo-plugin-python-1.9.17p1-1.1.aarch64",
                  "product_id": "sudo-plugin-python-1.9.17p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
                  "product_id": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
                  "product_id": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "sudo-test-1.9.17p1-1.1.aarch64",
                  "product_id": "sudo-test-1.9.17p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "system-group-sudo-1.9.17p1-1.1.aarch64",
                "product": {
                  "name": "system-group-sudo-1.9.17p1-1.1.aarch64",
                  "product_id": "system-group-sudo-1.9.17p1-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-1.9.17p1-1.1.ppc64le",
                  "product_id": "sudo-1.9.17p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-devel-1.9.17p1-1.1.ppc64le",
                  "product_id": "sudo-devel-1.9.17p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-plugin-python-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-plugin-python-1.9.17p1-1.1.ppc64le",
                  "product_id": "sudo-plugin-python-1.9.17p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
                  "product_id": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
                  "product_id": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-test-1.9.17p1-1.1.ppc64le",
                  "product_id": "sudo-test-1.9.17p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "system-group-sudo-1.9.17p1-1.1.ppc64le",
                "product": {
                  "name": "system-group-sudo-1.9.17p1-1.1.ppc64le",
                  "product_id": "system-group-sudo-1.9.17p1-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "sudo-1.9.17p1-1.1.s390x",
                  "product_id": "sudo-1.9.17p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "sudo-devel-1.9.17p1-1.1.s390x",
                  "product_id": "sudo-devel-1.9.17p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-plugin-python-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "sudo-plugin-python-1.9.17p1-1.1.s390x",
                  "product_id": "sudo-plugin-python-1.9.17p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
                  "product_id": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
                  "product_id": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "sudo-test-1.9.17p1-1.1.s390x",
                  "product_id": "sudo-test-1.9.17p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "system-group-sudo-1.9.17p1-1.1.s390x",
                "product": {
                  "name": "system-group-sudo-1.9.17p1-1.1.s390x",
                  "product_id": "system-group-sudo-1.9.17p1-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "sudo-1.9.17p1-1.1.x86_64",
                  "product_id": "sudo-1.9.17p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "sudo-devel-1.9.17p1-1.1.x86_64",
                  "product_id": "sudo-devel-1.9.17p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-plugin-python-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "sudo-plugin-python-1.9.17p1-1.1.x86_64",
                  "product_id": "sudo-plugin-python-1.9.17p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
                  "product_id": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
                  "product_id": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "sudo-test-1.9.17p1-1.1.x86_64",
                  "product_id": "sudo-test-1.9.17p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "system-group-sudo-1.9.17p1-1.1.x86_64",
                "product": {
                  "name": "system-group-sudo-1.9.17p1-1.1.x86_64",
                  "product_id": "system-group-sudo-1.9.17p1-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "sudo-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "sudo-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x"
        },
        "product_reference": "sudo-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "sudo-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "sudo-devel-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "sudo-devel-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x"
        },
        "product_reference": "sudo-devel-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "sudo-devel-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-plugin-python-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "sudo-plugin-python-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-plugin-python-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "sudo-plugin-python-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-plugin-python-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x"
        },
        "product_reference": "sudo-plugin-python-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-plugin-python-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "sudo-plugin-python-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x"
        },
        "product_reference": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x"
        },
        "product_reference": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "sudo-test-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "sudo-test-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x"
        },
        "product_reference": "sudo-test-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "sudo-test-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "system-group-sudo-1.9.17p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64"
        },
        "product_reference": "system-group-sudo-1.9.17p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "system-group-sudo-1.9.17p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le"
        },
        "product_reference": "system-group-sudo-1.9.17p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "system-group-sudo-1.9.17p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x"
        },
        "product_reference": "system-group-sudo-1.9.17p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "system-group-sudo-1.9.17p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
        },
        "product_reference": "system-group-sudo-1.9.17p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-32462",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-32462"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-32462",
          "url": "https://www.suse.com/security/cve/CVE-2025-32462"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245274 for CVE-2025-32462",
          "url": "https://bugzilla.suse.com/1245274"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-32462"
    },
    {
      "cve": "CVE-2025-32463",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-32463"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x",
          "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-32463",
          "url": "https://www.suse.com/security/cve/CVE-2025-32463"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245275 for CVE-2025-32463",
          "url": "https://bugzilla.suse.com/1245275"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-plugin-python-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-sudo-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-policy-wheel-auth-self-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.9.17p1-1.1.x86_64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.aarch64",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.ppc64le",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.s390x",
            "openSUSE Tumbleweed:system-group-sudo-1.9.17p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-32463"
    }
  ]
}