CVE-2025-43379

This vulnerability is caused by improper link resolution before file access (CWE-59) due to insufficient validation of symlinks . Affected products include iOS 26.1 , iPadOS 26.1 , macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , macOS Tahoe 26.1 , tvOS 26.1 , visionOS 26.1 , and watchOS 26.1 . An at...

CVE-2025-43457

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43457

A use-after-free vulnerability in the web page rendering modules of WebKitGTK and WPE WebKit allows a remote attacker to cause an unexpected process crash or service failure. This issue was triggered by processing maliciously crafted web content and has been addressed through improved memory mana...

CVE-2025-43436

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps...

CVE-2025-43323

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user...

CVE-2025-43440

A vulnerability in the WebKitGTK web engine and WebKit allows processing of maliciously crafted web content to trigger an unexpected process crash or service failure. The root cause is attributed to a lack of measures taken to protect the structure of web pages and associated improved checks and ...

CVE-2025-43440

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43438

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin...

CVE-2025-43455

A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views...

CVE-2025-43419

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43435

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43507

A privacy vulnerability in Find My allows an app to fingerprint the user due to the improper handling of sensitive data. The issue has been addressed by moving sensitive data to a more secure location. This vulnerability affects iOS 18.7.2 , iPadOS 18.7.2 , iOS 26.1 , iPadOS 26.1 , macOS Tahoe 26...

CVE-2025-43439

A privacy issue in On-device Intelligence allows an application to fingerprint the user due to the exposure of sensitive data. This vulnerability affects iOS , iPadOS , and visionOS before versions 18.7.2 (for iOS/iPadOS) and 26.1 (for iOS/iPadOS/visionOS). The issue is resolved by removing the s...

CVE-2025-43500

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.1 and iPadOS 26.1, watchOS 26.1, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43445

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. Processing a maliciously crafted media file may...

CVE-2025-43392

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. A website may exfiltrate image data cross-origin...

CVE-2025-43444

A permissions issue in the Installer component of various Apple operating systems allowed an app to fingerprint the user . This vulnerability was addressed by implementing additional restrictions. The issue is fixed in iOS 18.7.2 , iPadOS 18.7.2 , iOS 26.1 , iPadOS 26.1 , macOS Tahoe 26.1 , tvOS ...

CVE-2025-43413

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe system-wide network connections...

CVE-2025-43389

A privacy vulnerability was identified in Apple products, where an application could potentially access sensitive user data . The issue was addressed by removing the vulnerable code. This vulnerability affected iOS 18.7.2 , iPadOS 18.7.2 , iOS 26.1 , iPadOS 26.1 , macOS Sequoia 15.7.2 , macOS Son...