CVE-2025-43208

CVE-2025-43208 describes a permissions issue in macOS Tahoe 26 where an app may be able to read sensitive location information. The fixed version is macOS Tahoe 26, addressing the vulnerability through additional restrictions. The CVSS analysis indicates local attack vector with low attack comple...

CVE-2025-43208

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location information...

CVE-2025-43208

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location information...

CVE-2025-24088

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles...

CVE-2025-24088

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles...

CVE-2025-24088

CVE-2025-24088 affects Apple macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles. The entries consistently state the issue was fixed in macOS Tahoe 26 by adding additional logic. Impact described as bypassing MDM enforcement; no exploitation details are provided in ...

CVE-2025-43337

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43337

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43272

CVE-2025-43272 is a WebKitGTK-related issue (CVE-2025-43272) addressed via memory-management fixes. Publicly documented fixes reference WebKitGTK/WebKitGTK4 across multiple distributions and platforms (debian, almalinux, amazon linux). The core description in the CVE entry notes that processing m...

CVE-2025-43287

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously crafted image may corrupt process memory...

CVE-2025-43287

CVE-2025-43287 affects macOS Tahoe (macOS 26) and is a memory corruption issue triggered by processing specially crafted images. The root cause is described as “improved memory handling” in the fixed release. Impact is stated as high for confidentiality and availability, with local attack vector ...

CVE-2025-31268

Summary: CVE-2025-31268 is a permissions-related flaw in macOS that could allow an app to access protected user data. The issue is addressed in macOS Sonoma 14.8 and macOS Sequoia 15.7 (and related vendor advisories confirm similar remediation messaging). What’s affected (from provided sources): ...

CVE-2025-31268

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43291

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system...

CVE-2025-43291

CVE-2025-43291 is a permissions issue in macOS Sequoia (15.7) and macOS Sonoma (14.8) addressed by removing the vulnerable code. The issue could allow an app to modify protected parts of the filesystem. Apple lists this CVE under the SharedFileList and notes the fix as part of security content fo...

CVE-2025-24197

CVE-2025-24197 describes a logic issue that could allow an app to access sensitive user data. Affected products are macOS Sonoma 14.8 and macOS Sequoia 15.7; the issue is resolved by these updates. The description confirms a fix with improved checks; no exploit details are provided in the sources.

CVE-2025-24197

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43317

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43340

Apple macOS Tahoe 26 fixes CVE-2025-43340, a permissions issue that could allow an app to break out of its sandbox. The vulnerability is addressed by the Tahoe 26 security update (Apple security content). Affected: macOS Tahoe 26. Root cause: sandbox restrictions were insufficient in some app con...

CVE-2025-43340

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...