CVE-2025-43305

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...

CVE-2025-43344

CVE-2025-43344 describes an out-of-bounds access issue in Apple OS components that is mitigated by improved bounds checking. The vulnerability is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The issue could allow an app to terminate the system, depending on context. Connected...

CVE-2025-43190

CVE-2025-43190 describes a parsing issue in how directory paths are handled, addressed by improved path validation. The fixed products and versions listed in public records include watchOS 26, macOS Sonoma 14.8, iOS 26, iPadOS 26, visionOS 26, and macOS Sequoia 15.7. The vulnerability could enabl...

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43368

CVE-2025-43368 is a use-after-free vulnerability in WebKitGTK/WebKit (webuikit) that can occur while processing malicious web content, potentially causing an unexpected crash in Safari when rendering content. Connected advisories (Debian, AlmaLinux, Amazon Linux 2, Astra Linux) confirm the issue ...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...

CVE-2025-43295

CVE-2025-43295 is a denial-of-service issue that Apple addressed by improving input validation. The vulnerability is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7, and iPadOS 18.7. The public description notes that an app may be able to cause a DoS, but the provided documents do not sp...

CVE-2025-43329

CVE-2025-43329 is a permissions-related sandbox-bypass vulnerability in Apple platforms. The issue allows a locally authenticated app with low privileges and no user interaction to break out of its sandbox. It is fixed in tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The NVD entry states a permissi...

CVE-2025-43283

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43283

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43283

CVE-2025-43283 maps to Apple macOS Tahoe 26. The vulnerability is an out-of-bounds read caused by insufficient bounds checking, with the fix implemented in macOS Tahoe 26. Impact is described as potential unintended system termination when exploited locally; CVSSv3.1 metrics indicate a LOWBase sc...

CVE-2025-43333

CVE-2025-43333 refers to a permissions issue in macOS that could allow an app to gain root privileges. The available description and connected documents indicate this was mitigated by additional restrictions and is fixed in macOS Tahoe 26. The Apple security content confirms an authority-level im...

CVE-2025-43333

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to gain root privileges...

CVE-2025-43299

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...

CVE-2025-43299

CVE-2025-43299 affects macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7, and iPadOS 18.7. Description: a denial-of-service issue was addressed by improved input validation. Root cause: insufficient validation leading to DoS when handling certain inputs. Impact: potential crash or service disruptio...

CVE-2025-43325

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43325

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43325

CVE-2025-43325 concerns macOS Tahoe 26 where sandbox restrictions were strengthened to address an access issue. The vulnerability allowed an app to potentially access sensitive user data due to under-restricted sandboxing prior to the fix. The fix is implemented in macOS Tahoe 26; users/devices s...

CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...