4143 matches found
CVE-2025-43304
CVE-2025-43304 describes a race condition in macOS where improved state handling fixes a vulnerability that could allow an app to gain root privileges. The issue is fixed in macOS Sonoma 14.8 and macOS Sequoia 15.7. Attack path is local with high impact on confidentiality, integrity, and availabi...
CVE-2025-43344
CVE-2025-43344 describes an out-of-bounds access issue in Apple OS components that is mitigated by improved bounds checking. The vulnerability is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The issue could allow an app to terminate the system, depending on context. Connected...
CVE-2025-43368
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...
CVE-2025-43295
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...
CVE-2025-43329
CVE-2025-43329 is a permissions-related sandbox-bypass vulnerability in Apple platforms. The issue allows a locally authenticated app with low privileges and no user interaction to break out of its sandbox. It is fixed in tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The NVD entry states a permissi...
CVE-2025-43283
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...
CVE-2025-43283
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...
CVE-2025-43283
CVE-2025-43283 maps to Apple macOS Tahoe 26. The vulnerability is an out-of-bounds read caused by insufficient bounds checking, with the fix implemented in macOS Tahoe 26. Impact is described as potential unintended system termination when exploited locally; CVSSv3.1 metrics indicate a LOWBase sc...
CVE-2025-43333
CVE-2025-43333 refers to a permissions issue in macOS that could allow an app to gain root privileges. The available description and connected documents indicate this was mitigated by additional restrictions and is fixed in macOS Tahoe 26. The Apple security content confirms an authority-level im...
CVE-2025-43333
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to gain root privileges...
CVE-2025-43299
CVE-2025-43299 affects macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7, and iPadOS 18.7. Description: a denial-of-service issue was addressed by improved input validation. Root cause: insufficient validation leading to DoS when handling certain inputs. Impact: potential crash or service disruptio...
CVE-2025-43325
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43325
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43292
Affected product/component: macOS Tahoe 26 and macOS Sequoia 15.7.2. Vulnerability: CVE-2025-43292 is a race condition in state handling that may allow an app to access sensitive user data. Root cause: race condition with improved state handling; remediation: update to macOS Tahoe 26 or macOS Seq...
CVE-2025-43314
The CVE-2025-43314 issue is a parsing/validation flaw in handling directory paths that could allow an app to access sensitive user data. Public details confirm fixes are in macOS Sonoma 14.8 and macOS Sequoia 15.7 (with related references listing StorageKit path validation improvements). The root...
CVE-2025-43355
CVE-2025-43355 is a type confusion vulnerability addressed by Apple across multiple platforms. The issue, which can lead to a denial-of-service, is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7, visionOS 26, and iOS 18 and iPadOS 18.7. Root cause is a t...
CVE-2025-43375
The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...
CVE-2025-31271
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...
CVE-2025-31271
CVE-2025-31271 relates to macOS Tahoe 26 where, due to state mismanagement, incoming FaceTime calls could appear or be accepted on a locked macOS device even if lock screen notifications are disabled. The issue is addressed through improved state management and is fixed in macOS Tahoe 26 (Apple s...