CVE-2025-43335

CVE-2025-43335 is a macOS vulnerability addressed by Apple in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue involves a logic issue that could allow an app to access user‑sensitive data. Public records from NVD/Red Hat entries align on the fixed versions and the data e...

CVE-2025-43335

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access user-sensitive data...

CVE-2025-43335

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43378

CVE-2025-43378: A permissions issue in macOS Sequoia and Tahoe allowed an app to access sensitive user data. Affected products: macOS Sequoia 15.7.2 and macOS Tahoe 26.1, where the issue is fixed by additional restrictions and updated validation. The connected sources confirm the root cause as a ...

CVE-2025-43479

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43394

CVE-2025-43394 affects Apple macOS (Sonoma 14.8.2, Sequoia 15.7.2, Tahoe 26.1). Root cause: improper/synopsis handling of symbolic links that may allow an app to access protected user data. Affected components include system components that rely on symlink validation; the description notes improv...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43399

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43395

CVE-2025-43395 involves macOS where the issue was addressed by improved handling of symbolic links. The vulnerability could allow an app to access protected user data. Affected macOS versions include Sonoma 14.8.2, Sequoia 15.7.2, and Tahoe 26.1. The root cause, as described in the sources, is th...

CVE-2025-43469

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43405

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43405

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43468

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43468

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43409

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43409

CVE-2025-43409 is a permissions/sandbox issue in macOS Sequoia and macOS Tahoe. Affected: macOS Sequoia (15.7.x) and macOS Tahoe (26.x). Description: an app may be able to access sensitive user data due to insufficient sandbox/validation checks. Root cause: permissions-related vulnerability with ...

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to access other user information by sending a POST request to the paramete...

Apple macOS 安全漏洞

ch is a ClickHouse open source low-level Go client for ClickHouse. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from insufficient privilege checking and could result in access to sensitive user data...

PT-2025-44997

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request through the id...