▽Main Page - OWASP ●04/18 22:18 OWASP Calls to Build a Unified Framework for Global Vulnerability IntelligenceSteve Springett, April 17, 2025In response to increasing concerns over the effectiveness of the CVE Program and the sustainability of the U.S. government’s role in managing the world’s largest vulnerability database, cybersecurity leaders and international stakeholders are coming together to explore a federated model f
▽セキュリティホール memo ●04/18 19:07 ■ 2025.04.18■ Apple 方面 0-day (iOS / iPadOS, tvOS, visionOS, macOS)(Apple, 2025.04.16)0-day 2 件です。全体Apple security releases (Apple)0-dayCVE-2025-31200 - CoreAudio攻略メディアファイルを含むオーディオストリームを処理すると任意のコードが実行される。CVE-2025-31201 - RPAC (Remote Procedure Authentication Component)任意の読み書き権限を持つ攻撃者が ポインター認証 を回避できる。どちらも Apple is aware of a report that this issue may have beenexploited in an extremely s