CVE-2025-31226

A logic issue in the ImageIO component of various Apple products allows a denial-of-service when processing a maliciously crafted image. The vulnerability affects iOS 18.5 , iPadOS 18.5 , iPadOS 17.7.7 , macOS Sequoia 15.5 , tvOS 18.5 , visionOS 2.5 , and watchOS 11.5 . Apple addressed the issue ...

CVE-2025-31204

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-31204

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-31212

This issue was addressed through improved state management. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5. An app may be able to access sensitive user data...

CVE-2025-31212

A vulnerability exists in the Core Bluetooth framework across multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The issue stems from deficiencies in access control and improved state management, which could allow an application to access and disclose se...

CVE-2025-31208

A vulnerability in the acv2 codec converter on Apple macOS allows remote attackers to perform an out-of-bounds read to disclose sensitive information. The root cause is a lack of proper validation of user-supplied data, which can lead to reading past the end of an allocated buffer. While the Init...

CVE-2025-31233

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2025-31233

A memory corruption vulnerability exists in Apple macOS (and other Apple platforms) due to a lack of proper validation of user-supplied data during MP4 file parsing . A remote attacker can exploit this by tricking a user into visiting a malicious page or opening a crafted video file, potentially ...

CVE-2025-31209

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Parsing a file may lead to disclosure of user information...

CVE-2025-31209

An out-of-bounds read vulnerability exists in Apple's PDF parsing mechanism due to a lack of proper validation of user-supplied data. This flaw can lead to the disclosure of sensitive user information and, when chained with other vulnerabilities, may allow for arbitrary code execution in the cont...

CVE-2025-31213

A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to access associated usernames and websites in a user's iCloud Keychain...

CVE-2025-31205

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin...

CVE-2025-31205

A vulnerability in WebKit and webkit2gtk allows a malicious website to exfiltrate data cross-origin . The root cause was addressed through improved checks . Affected products include Safari, iOS, iPadOS, macOS Sequoia, tvOS, visionOS, and watchOS . Remediation is available in versions 18.5 (Safar...

CVE-2025-31205

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin...

CVE-2025-31234

The issue was addressed with improved input sanitization. This issue is fixed in visionOS 2.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5. An attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A user may be able to elevate privileges...

CVE-2025-31222

A correctness issue exists in several Apple operating systems, including iOS 18.5 , iPadOS 18.5 , macOS Sequoia 15.5 , macOS Sonoma 14.7.6 , macOS Ventura 13.7.6 , tvOS 18.5 , visionOS 2.5 , and watchOS 11.5 . This flaw may allow a user to elevate privileges . The issue has been addressed with im...

CVE-2025-31238

Apple Safari and associated operating systems (iOS 18.5 , iPadOS 18.5 , macOS Sequoia 15.5 , tvOS 18.5 , visionOS 2.5 , and watchOS 11.5 ) are vulnerable to memory corruption when processing maliciously crafted web content. Specifically, a use-after-free vulnerability exists within the handling o...

CVE-2025-31238

The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-31242

A privacy issue in Apple's operating systems allows an application to potentially access sensitive user data due to inadequate private data redaction for log entries. This vulnerability affects several products and versions, including iOS 18.5 , iPadOS 18.5 , iPadOS 17.7.7 , macOS Sequoia 15.5 , ...