CVE-2025-43499

CVE-2025-43499: Apple fixed an entitlement-checking issue across Apple OS updates. The flaw allowed an app to access sensitive user data due to insufficient entitlement validation. Affected products/versions include iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1, and macOS S...

CVE-2025-43335

CVE-2025-43335 is a macOS vulnerability addressed by Apple in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue involves a logic issue that could allow an app to access user‑sensitive data. Public records from NVD/Red Hat entries align on the fixed versions and the data e...

CVE-2025-43397

CVE-2025-43397 is a local-permissions issue affecting Apple macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The underlying problem is described as a permissions issue that was addressed by removing vulnerable code, with the consequence that an app may be able to cause a denial-of...

CVE-2025-43397

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause a denial-of-service...

CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43378

CVE-2025-43378: A permissions issue in macOS Sequoia and Tahoe allowed an app to access sensitive user data. Affected products: macOS Sequoia 15.7.2 and macOS Tahoe 26.1, where the issue is fixed by additional restrictions and updated validation. The connected sources confirm the root cause as a ...

CVE-2025-43401

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. A remote attacker may be able to cause a denial-of-service...

CVE-2025-43401

CVE-2025-43401 is a denial-of-service vulnerability in macOS components that Apple has patched. Affected products include macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue is tied to improved validation in CoreAnimation, with exploitation described as a remote attacker po...

CVE-2025-43401

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A remote attacker may be able to cause a denial-of-service...

CVE-2025-43479

CVE-2025-43479 is a permissions issue in macOS components that could allow an app to access sensitive user data. The vulnerability is fixed in macOS updates: Sonoma 14.8.2, Sequoia 15.7.2, and Tahoe 26.1. The CVE’s published metrics indicate a local, low-complexity/vector with a medium base score...

CVE-2025-43496

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...

CVE-2025-43496

The CVE-2025-43496 issue affects Apple platforms (watchOS 26.1; macOS Tahoe 26.1; iOS 26.1/iPadOS 26.1; iOS 18.7.2/iPadOS 18.7.2; macOS Sequoia 15.7.2; visionOS 26.1). Description: remote content could be loaded even when the device setting Load Remote Images is off. Root cause: insufficient logi...

CVE-2025-43438

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43382

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43414

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

CVE-2025-43414

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43394

CVE-2025-43394 affects Apple macOS (Sonoma 14.8.2, Sequoia 15.7.2, Tahoe 26.1). Root cause: improper/synopsis handling of symbolic links that may allow an app to access protected user data. Affected components include system components that rely on symlink validation; the description notes improv...

CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory...