CVE-2025-24153

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2025-24145

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. An app may be able to view a contact's phone number in system logs...

CVE-2025-24145

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app may be able to view a contact's phone number in system logs...

CVE-2025-24153

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2024-54517

CVE-2024-54517 affects Apple platforms and is resolved by macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, and iPadOS 18.2. The issue involves an out-of-bounds/bounds-check related memory issue that could allow an app to corrupt coprocessor memory. Technical details from the connected docum...

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Visiting a malicious website may lead to address bar spoofing...

CVE-2025-24128

CVE-2025-24128 concerns address bar spoofing on web content seen in Safari and related WebKit components. The CVE entry states the issue is “addressed by adding additional logic” and is fixed in: macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The Apple advisory confirms a Safari 18.3...

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Visiting a malicious website may lead to address bar spoofing...

CVE-2025-24094

A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access user-sensitive data...

CVE-2025-24094

CVE-2025-24094 corresponds to a race condition that was mitigated by additional validation. The vulnerability could allow an app to access user-sensitive data. Documents confirm fixes in macOS updates: Ventura 13.7.3, Sequoia 15.3, and Sonoma 14.7.3. The connected sources do not provide exploit d...

CVE-2025-24094

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access user-sensitive data...

CVE-2025-24169

A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication...

CVE-2025-24169

The CVE-2025-24169 issue is a logging-related vulnerability in macOS Sequoia (15.3) and Safari (18.3) where data redaction improvements address a potential exposure. The NVD entry notes that a malicious app may be able to bypass browser extension authentication, with a CVSS v3.1 base score of 7.5...

CVE-2025-24169

A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A malicious app may be able to bypass browser extension authentication...

CVE-2024-54557

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An attacker may gain access to protected parts of the file system...

CVE-2024-54557

CVE-2024-54557 affects macOS via a logic issue in SharedFileList that could allow access to protected parts of the file system. The fixed revisions are macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. The issue is described as a logic restriction problem; no exploit details are ...

CVE-2025-24129

CVE-2025-24129 is a type confusion vulnerability in Apple AirPlay that affects iOS 18.3/iPadOS 18.3, visionOS 2.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Root cause: type confusion in AirPlay code leading to potential application termination. Impact: a remote attacker on the local netwo...

CVE-2025-24129

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may cause an unexpected app termination...

CVE-2024-54516

CVE-2024-54516 describes a permissions issue in macOS where an app may be able to approve a launch daemon without user consent. Concrete details in connected sources show the vulnerability affects macOS Sonoma 14.7.2 and macOS Sequoia 15.2, with an issue fixed in those updates. The underlying ris...

CVE-2024-54516

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to approve a launch daemon without user consent...