CVE-2025-31189

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox...

CVE-2025-31189

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox...

CVE-2025-31198

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A path handling issue was addressed with improved validation...

CVE-2025-31198

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A path handling issue was addressed with improved validation...

CVE-2025-30466

CVE-2025-30466 concerns a bypass of the Same Origin Policy in Apple web/OS components. The issue is addressed through improved state management and is fixed in Safari 18.4, iOS 18.4, iPadOS 18.4, visionOS 2.4, and macOS Sequoia 15.4. The CVE entry lists network as the attack vector, with no user ...

CVE-2025-31261

CVE-2025-31261 is a permissions issue in macOS where an app may access protected user data. It is addressed by applying stronger sandbox restrictions and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Objective details on affected components/versions beyond the pat...

CVE-2025-31199

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data...

CVE-2025-31231

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information...

CVE-2025-31231

CVE-2025-31231 describes a permissions issue in macOS Sequoia prior to the 15.4 patch, where an app may be able to read sensitive location information. The vulnerability is fixed in macOS Sequoia 15.4. Affected product: macOS Sequoia (Apple). Root cause: insufficient restrictions on location data...

CVE-2025-31199

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.8.2, visionOS 2.4. An app may be able to access sensitive user data...

CVE-2025-31231

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information...

CVE-2025-31261

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data...

CVE-2025-31261

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-31199

CVE-2025-31199 is a logging-data-redaction flaw addressed by Apple in macOS/macOS-derived OS updates (Sequoia 15.4, Sonoma 14.x line, iOS/iPadOS 18.4, visionOS 2.4). The issue allowed an app to access sensitive user data due to insufficient data redaction in log outputs. Apple’s advisories list t...

CVE-2025-31198

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A path handling issue was addressed with improved validation...

CVE-2025-31198

CVE-2025-31198 refers to a macOS path-handling issue fixed by improved symlink validation. Affected components are tied to macOS releases: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The issue’s CVSS metrics indicate local attack vector, low attack complexity, no privileges required, user in...

CVE-2025-31264

The CVE-2025-31264 entry concerns an authentication issue in macOS devices where improved state management fixes allow viewing sensitive user information on a locked device. Affected products and fixes identified in connected sources include macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Son...

CVE-2025-31198

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A path handling issue was addressed with improved validation...

CVE-2025-31264

An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2025-31264

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with physical access to a locked device may be able to view sensitive user information...