CVE-2025-30429

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24095

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences...

CVE-2025-24095

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privacy preferences...

CVE-2025-24095

A vulnerability in iOS , iPadOS , and visionOS allows an application to bypass Privacy preferences . The root cause was addressed by implementing additional entitlement checks . This issue is resolved in iOS 18.4 , iPadOS 18.4 , and visionOS 2.4 . Exploitation details are not provided in the docu...

CVE-2025-24216

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24216

The WebKitGTK component in MiracleLinux 8 , MiracleLinux 9 , Mageia , and TencentOS is vulnerable to an issue where processing maliciously crafted web content may lead to an unexpected Safari crash . The root cause is attributed to improper memory handling, and the vulnerability is addressed by i...

CVE-2025-24257

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory...

PT-2025-13903

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 tvOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description A privacy issue was addressed by not logging contents of text fields. An app m...

PT-2025-13966

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description The issue is related to password autofill, which may fill in passwords after failing authentication. This...

PT-2025-13973

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description The issue allows an attacker with physical access to a locked device to potentially view sensitive user...

PT-2025-18132 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 and 18.4 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 watchOS versions prior to 11.4 visionOS versions prior to 2.4 Description: The...

PT-2025-13878 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma...

PT-2025-13908 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 and 17.7.6 Description: This issue was addressed with improved data access restriction. Sensitive keychain data may be accessible from an iOS backup...

PT-2025-13885 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: A script imports issue was addressed with improved isolation. Visiting a...

PT-2025-13887 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 tvOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: A logic issue was addressed with improved checks. Processing maliciously...

CVE-2025-31184: Improper Preservation of Permissions

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network...

CVE-2025-30438: Improper Access Control

This issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. A malicious app may be able to dismiss the system notification on the Lock Screen that...

CVE-2025-24257: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2025-24243: Improper Control of Generation of Code

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2025-24182: Out-of-bounds Read

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory...