CVE-2025-46289

A logic issue was addressed with improved file handling. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access protected user data...

CVE-2025-46289

CVE-2025-46289 describes a logic issue in macOS file handling that could allow an app to access protected user data. The vulnerability is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, and macOS Tahoe 26.2. Practically, an attacker could exploit improper file handling to leak data under the ...

CVE-2025-43463

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43463

CVE-2025-43463 describes a parsing issue in handling directory paths that was mitigated by improved path validation. It affects macOS Sonoma 14.8.3, macOS Tahoe 26.1, and macOS Sequoia 15.7.3, where an app may be able to access sensitive user data. The connected sources corroborate this path-vali...

CVE-2025-43463

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

CVE-2025-43320

CVE-2025-43320 affects Apple macOS Sequoia 15.7.3 and macOS Tahoe 26. The issue allows an app to bypass launch-constraint protections and execute malicious code with elevated privileges. The description indicates the fix involved adding additional logic. Apple security pages associate this CVE wi...

CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

EUVD-2025-203166

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges...

CVE-2025-43527

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3. An app may be able to gain root privileges...

CVE-2025-43527

CVE-2025-43527 is a permissions-related elevation-privilege issue affecting macOS Sequoia 15.7.3 and macOS Tahoe 26.2. The advisory notes that an app may be able to gain root privileges due to insufficient restrictions. Affected products/versions are fixed in Sequoia 15.7.3 and Tahoe 26.2. The av...

CVE-2025-43511

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43497

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43497

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43497

The CVE-2025-43497 entry describes an access issue in macOS Tahoe 26.1 where an application may be able to break out of its sandbox due to insufficient sandbox restrictions. The issue is fixed in macOS Tahoe 26.1. The vulnerability is described with a LOCAL attack vector, LOW privileges, and no u...

CVE-2025-43473

This issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43473

CVE-2025-43473 affects macOS Tahoe 26.1 and earlier, where an issue with improved state management could allow an app to access sensitive user data. The vulnerability is fixed in macOS Tahoe 26.1. Impact is described as local access with high confidentiality impact and no integrity/availability i...

CVE-2025-43473

This issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-46276

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data...

CVE-2025-46276

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data...