12859 matches found
CVE-2025-43321
The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43337
CVE-2025-43337 : An access issue in macOS shows that an app may be able to access sensitive user data due to sandbox restrictions. It is fixed in macOS Sequoia 15.7.2 and macOS Tahoe 26. Update to Sequoia 15.7.2 or Tahoe 26 to mitigate. No exploitation details are provided in the supplied documen...
CVE-2025-43272
The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...
CVE-2025-43272
CVE-2025-43272 is a WebKitGTK-related issue (CVE-2025-43272) addressed via memory-management fixes. Publicly documented fixes reference WebKitGTK/WebKitGTK4 across multiple distributions and platforms (debian, almalinux, amazon linux). The core description in the CVE entry notes that processing m...
CVE-2025-43317
A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data...
CVE-2025-43326
CVE-2025-43326 describes an out-of-bounds read that was mitigated by improved bounds checking. The affected macOS releases include macOS Sonoma 14.8 and macOS Sequoia 15.7, where an app may have been able to access sensitive user data. The issue is addressed in the listed updates by Apple. No exp...
CVE-2025-43263
The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...
CVE-2025-43263
The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox...
CVE-2025-43263
CVE-2025-43263 affects Apple Xcode (26) with a sandbox check insufficiency in components such as IDE CoreML and Xcode itself. The issue allows an app to read and write files outside its sandbox due to insufficient path/file handling checks. The vulnerability is addressed in Xcode 26 via improved ...
CVE-2025-30468
Summary of CVE-2025-30468 : Several connected sources confirm a vulnerability in iOS/iPadOS before version 26 where Private Browsing tabs could be accessed without authentication due to improper state management. Apple has issued fixes in iOS 26 and iPadOS 26, addressing the issue through improve...
CVE-2025-43203
CVE-2025-43203 affects Apple iOS and iPadOS (versions prior to 18.7/26). The issue is a cache-handling vulnerability that could allow a local attacker with physical access to an unlocked device to view an image in the most recently viewed locked note. Root cause: improper cache handling that perm...
CVE-2025-43203
The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...
CVE-2025-31254
CVE-2025-31254 affects Apple’s Safari and related iOS/iPadOS WebKit stack. The root cause is insufficient/weak URL validation, allowing a malicious web content to trigger an unexpected URL redirection. Public documentation in the connected sources confirms the issue is addressed by improved URL v...
CVE-2025-43370
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...
CVE-2025-43370
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process...
CVE-2025-43370
CVE-2025-43370 affects Apple Xcode 26, where a path handling issue can crash a process when processing an oversized path. The root cause is improved validation of path input in Xcode 26 development tooling, with confirmed fix in the Xcode 26 release. Public sources across Red Hat, CNVD, NVD, and ...
CVE-2025-43327
The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-43327
Safari 26 on macOS Sonoma/Sequoia fixes CVE-2025-43327, where visiting a malicious website could lead to address bar spoofing. The issue is resolved by adding additional logic in Safari. Affected product: Safari (macOS Sonoma/Sequoia). Remediation: update to Safari 26. If you need details, see th...