CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43350

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker may be able to view restricted content from the lock screen...

CVE-2025-43345

A correctness issue was addressed with improved checks. This issue is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7, visionOS 26, iOS 18.7 and iPadOS 18.7. An app may be able to access sensitive user data...

CVE-2025-43335

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access user-sensitive data...

UBUNTU-CVE-2025-43427

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43450

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn information about the current camera view before being granted camera access...

CVE-2025-43396

CVE-2025-43396 is a logic issue in macOS that could allow a sandboxed app to access sensitive user data. It is reported as a LOCAL, low complexity (UI: REQUIRED) vulnerability with high confidentiality impact and no user interaction required beyond the app’s sandbox privileges. Apple fixes are av...

CVE-2025-43460

CVE-2025-43460 affects Apple iOS and iPadOS through a logic issue that allows an attacker with physical access to a locked device to view sensitive user information. The vulnerability is tied to insufficient checks and is fixed in iOS 26.1 and iPadOS 26.1. Affected component details are not expli...

CVE-2025-43460

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2025-43323

CVE-2025-43323 is an Apple privacy vulnerability addressed by adding entitlement checks. It affects visionOS, tvOS, iOS, iPadOS, and watchOS, with fixes in version 26 for all listed platforms. The issue allowed an app to fingerprint the user, and remediation is to upgrade to the specified OS rele...

CVE-2025-43496

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...

CVE-2025-43382

CVE-2025-43382 describes a parsing issue in how macOS handles directory paths, addressed by improved path validation. Affected products include macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1; an app may be able to access sensitive user data due to this logic/path validation flaw....

CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 26, watchOS 26, iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, visionOS 26. A malicious app may be able to read kernel memory...

CVE-2025-43419

CVE-2025-43419 affects WebKitGTK/WebKit content processing. The vulnerability is described as memory corruption caused by improper memory handling during processing of malicious web content. Affected packages in various Linux distributions (e.g., webkitgtk4) have been addressed by updates to vers...

CVE-2025-43408

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2025-43412

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to break out of its sandbox...

CVE-2025-43468

CVE-2025-43468 affects Intel-based macOS: downgrade issue mitigated by additional code-signing restrictions. Affected releases include macOS Sonoma 14.8.2, Sequoia 15.7.2, and Tahoe 26.1. The issue could allow an app to access sensitive user data. Mitigation/Remediation: fixed in the cited macOS ...

CVE-2025-43468

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43409

CVE-2025-43409 is a permissions/sandbox issue in macOS Sequoia and macOS Tahoe. Affected: macOS Sequoia (15.7.x) and macOS Tahoe (26.x). Description: an app may be able to access sensitive user data due to insufficient sandbox/validation checks. Root cause: permissions-related vulnerability with ...

CVE-2025-43448

CVE-2025-43448 is an Apple OS vulnerability where an app could break out of its sandbox due to insufficient validation of symlinks. It is addressed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, tvOS 26.1, watchOS 26.1, and ...