CVE-2025-43270

CVE-2025-43270 describes an access control issue in macOS where an app may gain unauthorized access to the Local Network. The vulnerability is addressed by stricter sandboxing and is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The initial description does not provi...

CVE-2025-43228

CVE-2025-43228 affects Apple WebKit components used by iOS 18.6, iPadOS 18.6, and Safari 18.6. The description indicates the issue was mitigated by an improved UI and is fixed in the listed Apple platforms. The primary impact stated is address bar spoofing when a user visits a malicious website, ...

CVE-2025-43249

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges...

CVE-2025-43198

The CVE-2025-43198 issue affects macOS Sequoia and macOS Sonoma; the vulnerability could allow an app to access protected user data. It has been addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The available documents do not specify the exact r...

CVE-2025-43198

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data...

CVE-2025-43214

CVE-2025-43214 affects WebKit/GPU-based web content handling used by Safari/WebKitGTK; the issue is a memory handling/processing weakness that may cause an unexpected crash when processing malicious web content. The CVE is listed with CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no...

CVE-2025-31280

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted file may lead to heap corruption...

CVE-2025-31278

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43215

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2025-43215

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2025-43215

CVE-2025-43215 affects macOS Sequoia; the issue involves processing of malicious images that could disclose process memory. It is fixed in macOS Sequoia 15.6 via improved checks. Practical impact is memory disclosure when handling crafted images. Remediation: update to macOS Sequoia 15.6 or later...

CVE-2025-43188

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges...

CVE-2025-43188

CVE-2025-43188 affects macOS Sequoia; a permissions issue could allow a malicious app to gain root privileges. The vulnerability is fixed in macOS Sequoia 15.6. The advisory notes a local/privilege-elevation risk with user interaction required for exploitation; apply the Sequoia 15.6 update to mi...

CVE-2025-43188

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges...

CVE-2025-43261

Summary of CVE-2025-43261 : A logic issue was addressed with improved checks that could allow an app to break out of its sandbox. This vulnerability is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The NVD entry assigns a high impact (confidentiality, integrity, avai...

CVE-2025-43261

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43277

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43240

CVE-2025-43240 is linked to WebKitGTK/webkit2gtk in multiple distributions. The issue is a logic flaw where a download’s origin may be incorrectly associated. Public details in connected advisories show fixes implemented as WebKitGTK/WebKit2GTK updates (e.g., 2.48.5 series) across Debian (DSA-597...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...