CVE-2025-43342

CVE-2025-43342 affects WebKitGTK/webkitgtk4 (WebKitGTK engine). The description and connected advisories indicate a correctness issue where processing maliciously crafted web content may cause an unexpected process crash. The vulnerability is tracked with a high severity (CVSSv3.1: 9.8, CRITICAL;...

CVE-2025-43207

This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data...

CVE-2025-43207

This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data...

CVE-2025-43207

CVE-2025-43207 affects macOS Tahoe 26. The issue is a privilege mismanagement/entitlements problem that could allow an app to access user-sensitive data. Apple fixed it in Tahoe 26 by improving entitlements. No exploitation details are provided in the available documents. Remediation: update/prov...

CVE-2025-43315

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access user-sensitive data...

CVE-2025-43315

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access user-sensitive data...

CVE-2025-43315

The CVE-2025-43315 issue affects macOS components and has been addressed by removing the vulnerable code. Public advisories indicate fixes in macOS Sonoma 14.8 and macOS Sequoia 15.7, with an app potentially able to access user‑sensitive data prior to the patch. The available connected sources co...

CVE-2025-43357

CVE-2025-43357 is an Apple vulnerability affecting iOS, iPadOS, and related components (Call History) that could allow fingerprinting of a user. The primary documented impact is exposure of sensitive information through redaction issues, with exploitation described as local in scope and requiring...

CVE-2025-43357

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user...

CVE-2025-43357

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user...

CVE-2025-43204

CVE-2025-43204 targets macOS Tahoe 26, with the underlying issue described as vulnerable code being removed to fix a sandbox breakout risk. Affected product: macOS Tahoe 26. Root cause: removal of the vulnerable code (no further technical specifics provided in the documents). Impact: an app may b...

CVE-2025-43204

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...

CVE-2025-43204

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...

CVE-2025-43341

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8. An app may be able to gain root privileges...

CVE-2025-43316

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26, visionOS 26. A malicious app may be able to gain root privileges...

CVE-2025-43316

CVE-2025-43316 is a local privilege-escalation vulnerability in Apple’s DiskArbitration component that could allow a malicious app to gain root privileges. The issue is fixed in visionOS 26; prior builds of visionOS 26 are affected. The CVE entry describes a permissions issue addressed with addit...

CVE-2025-43316

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26, visionOS 26. A malicious app may be able to gain root privileges...

CVE-2025-31269

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8. An app may be able to access protected user data...

CVE-2025-43286

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to break out of its sandbox...

CVE-2025-43286

The CVE-2025-43286 entry describes a permissions issue that could allow an app to break out of its sandbox on macOS. Connected sources identify the affected platforms as macOS Sonoma and macOS Sequoia, with fixes delivered in Sonoma 14.8 and Sequoia 15.7. The Apple security content lists the issu...