CVE-2025-24120

CVE-2025-24120 affects macOS where an issue was caused by improper lifecycle management of an object. The NVD entry states the vulnerability could allow an attacker to trigger unexpected application termination. Affected platforms and patched versions are macOS Ventura 13.7.3, macOS Sequoia 15.3,...

CVE-2025-24120

This issue was addressed by improved management of object lifetimes. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An attacker may be able to cause unexpected app termination...

CVE-2025-24136

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A malicious app may be able to create symlinks to protected regions of the disk...

CVE-2025-24120

This issue was addressed by improved management of object lifetimes. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An attacker may be able to cause unexpected app termination...

CVE-2025-24177

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker on the local network may be able to cause a denial-of-service...

CVE-2025-24177

A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. A remote attacker may be able to cause a denial-of-service...

CVE-2025-24177

CVE-2025-24177 is an Apple AirPlay vulnerability. The description notes a null pointer dereference that was addressed by improved input validation, with a fixed patch in macOS Sequoia 15.3 and iOS/iPadOS 18.3. The CVE entry indicates a possible remote denial-of-service if exploited. Connected App...

CVE-2024-54499

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2024-54499

CVE-2024-54499 — Apple ImageIO use-after-free Description: A use-after-free issue in ImageIO was addressed by improved memory management. Processing a maliciously crafted image may lead to arbitrary code execution. Affected products/versions (as stated): visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS...

CVE-2025-24176

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attacker may be able to elevate their privileges...

CVE-2024-54549

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-54549

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-54549

CVE-2024-54549 relates to macOS Sequoia before version 15.2 where an app may access user-sensitive data due to a vulnerability addressed by improved redaction. The issue is fixed in macOS Sequoia 15.2. Affected software: macOS Sequoia (prior to 15.2). Root cause: insufficient redaction allowing a...

CVE-2025-24121

CVE-2025-24121 is a logic issue fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue allowed an app to modify protected parts of the file system. The Initial description states a patch with improved checks, and connected sources confirm affected OS versions and th...

CVE-2025-24121

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system...

CVE-2025-24121

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system...

CVE-2025-24160

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24140

CVE-2025-24140 affects macOS Sequoia 15.3 where files downloaded from the Internet may not have the quarantine flag applied. Apple’s records attribute the issue to improved state management and indicate a fix in Sequoia 15.3. Connected sources corroborate that the vulnerability concerns quarantin...

CVE-2025-24140

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. Files downloaded from the internet may not have the quarantine flag applied...

CVE-2025-24140

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. Files downloaded from the internet may not have the quarantine flag applied...