CVE-2025-43249

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges...

CVE-2025-43249

CVE-2025-43249 is a logic issue in macOS that can let an app gain root privileges. It is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The CVSS vector indicates a local exploit with low attack complexity and required user interaction (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/...

CVE-2025-43249

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges...

CVE-2025-43261

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43261

Summary of CVE-2025-43261 : A logic issue was addressed with improved checks that could allow an app to break out of its sandbox. This vulnerability is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The NVD entry assigns a high impact (confidentiality, integrity, avai...

CVE-2025-43261

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43240

CVE-2025-43240 is linked to WebKitGTK/webkit2gtk in multiple distributions. The issue is a logic flaw where a download’s origin may be incorrectly associated. Public details in connected advisories show fixes implemented as WebKitGTK/WebKit2GTK updates (e.g., 2.48.5 series) across Debian (DSA-597...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43248

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges...

CVE-2025-43248

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges...

CVE-2025-43248

CVE-2025-43248 is a local privilege-escalation vulnerability in macOS Sequoia (15.6) and macOS Sonoma (14.7.7). The issue is described as a logic error that was addressed by improved restrictions, with the fixed versions specifically listed as macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The CVSS ...

CVE-2025-31229

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver...

CVE-2025-31229

CVE-2025-31229 affects iOS and iPadOS with a logic issue in the Accessibility/Voi ceOver flow that could cause the passcode to be read aloud. Apple fixes this in iOS 18.6 / iPadOS 18.6; remediation is updating to these versions. The NVD entry maps to a high-severity (C) impact vulnerability, with...

CVE-2025-31229

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver...

PT-2025-31316

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.6 Description A logic issue existed due to insufficient checks, potentially leading to incorrect association of a download’s origin. Recommendations Update to macOS version 15.6...

PT-2025-31273 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.6 iPadOS versions prior to 18.6 Description: A logic issue was addressed with improved checks. This issue allows a passcode to be read aloud by VoiceOver. Recommendations: Update to iOS version 18.6. Update to iPadOS...

webkitgtk: Logic issue leading to leak of sensitive user information

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

webkitgtk: Logic issue leading to Content Security Policy bypass

A logic issue was found in WebKitGTK. A specially crafted web content could use this flaw to bypass Content Security Policy bypass when processed...