42665 matches found
CVE-2025-43422
The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able to disable Stolen Device Protection...
CVE-2025-43434
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash...
CVE-2025-43459
An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple Watch may be able to view Live Voicemail...
CVE-2025-43398
CVE-2025-43398 affects Apple platforms (tvOS, watchOS, macOS Tahoe, macOS Sequoia/Sonoma, iOS, iPadOS, visionOS). Root cause: memory handling issue addressed with memory improvements. Impact: an app may cause an unexpected system termination. Mitigation: fixes shipped in tvOS 26.1, watchOS 26.1, ...
CVE-2025-43376
A logic issue was addressed with improved state management. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on...
CVE-2025-43376
CVE-2025-43376 is a logic/state-management issue in WebKit/Safari affecting Apple platforms (Safari 26, WebKit updates across macOS Sonoma/Sequoia, iOS 26, iPadOS 26, tvOS/watchOS). The vulnerability could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. Root caus...
CVE-2025-43376
A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on...
CVE-2025-43360
CVE-2025-43360 affects Apple iOS and iPadOS Authentication Services. The issue allowed a password field to be unintentionally revealed due to a UI-related vulnerability. Root cause and affected component are described in the public CVE; Apple fixed the issue in iOS 26 and iPadOS 26 with an improv...
CVE-2025-43419
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-43419
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-43419
CVE-2025-43419 affects WebKitGTK/WebKit content processing. The vulnerability is described as memory corruption caused by improper memory handling during processing of malicious web content. Affected packages in various Linux distributions (e.g., webkitgtk4) have been addressed by updates to vers...
CVE-2025-43419
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-43435
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-43454
CVE-2025-43454 is tied to Apple iOS/iPadOS security updates. Affected components: Siri stack on iOS 18.7.2/iPadOS 18.7.2 and iOS 26.1/iPadOS 26.1. Root cause described as improper state management that could allow a device to persistently fail to lock. Impact is described as a device remaining un...
CVE-2025-43454
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. A device may persistently fail to lock...
CVE-2025-43442
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed...
CVE-2025-43383
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app...
CVE-2025-43383
CVE-2025-43383 is an out-of-bounds access issue resolved by improved bounds checking. Affected products/versions include tvOS 26.1, macOS Tahoe 26.1, iOS 26.1/iPadOS 26.1, iOS 18.7.2/iPadOS 18.7.2, macOS Sequoia 15.7.2, and visionOS 26.1. According to the sources, processing a maliciously crafted...
CVE-2025-43439
CVE-2025-43439 affects Apple platforms (iOS, iPadOS, visionOS). Description and connected references indicate a privacy issue where an app may fingerprint the user, addressed by removing sensitive data. Fixes are included in iOS 18.7.2, iPadOS 18.7.2, iOS 26.1, iPadOS 26.1, and visionOS 26.1. Pra...