CISA Adds Known Exploited Vulnerabilities to Catalog 8/18, 8/21

 CISA Adds One Known Exploited Vulnerability to Catalog | CISA (08/18)

CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability

“A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.”

 

CISA Adds One Known Exploited Vulnerability to Catalog | CISA (8/21)

CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

“An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.8, macOS Ventura 13.7.8, iPadOS 17.7.10, macOS Sequoia 15.6.1, iOS 18.6.2 and iPadOS 18.6.2. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.”