CVE-2025-24095

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences...

CVE-2025-24173

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-30470

The CVE-2025-30470 entry corresponds to a path-handling issue in Apple Maps that could allow an app to read sensitive location information. Concrete details from connected sources show this flaw affecting Maps functionality on Apple Watch (watchOS 11.4 security content lists CVE-2025-30470 under ...

CVE-2025-30427

CVE-2025-30427 is a use-after-free vulnerability in processing maliciously crafted web content that may lead to an unexpected Safari crash. Affected in multiple Apple platforms; fixes are implemented in visionOS 2.4, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, and Safari 18.4. Debian...

CVE-2025-24192

CVE-2025-24192 pertains to a script-imports issue in Safari and related Apple platforms. The vulnerability was addressed with improved isolation and is fixed in Safari 18.4, visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The issue could allow leakage of sensitive data when visiting ...

CVE-2025-24243

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2025-24243

CVE-2025-24243 is an Apple memory-management issue where processing a maliciously crafted file may lead to arbitrary code execution. It affects multiple platforms and is fixed in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, vision...

CVE-2025-24243

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2025-30426

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to enumerate a user's installed apps...

CVE-2025-30471

CVE-2025-30471 is a validation issue addressed by Apple across multiple platforms. The advisory indicates a remote attacker may cause a denial-of-service, with fixes shipped in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4/iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma...

CVE-2025-30430

This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication...

CVE-2025-24182

An out-of-bounds read in font processing was fixed across Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. Root cause: input validation flaw in font handling leading to potential memory disclosure. Practical impact: confidential memory exposure if a malicio...

CVE-2025-30430

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Password autofill may fill in passwords after failing authentication...

CVE-2025-24182

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2025-24194

CVE-2025-24194 is a logic issue fixed in visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. It concerns processing maliciously crafted web content, which could disclose process memory. The CVSSv3.1 base score is 6.5 (MEDIUM), with network access required and no privileges, wh...

CVE-2025-24264

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24264

CVE-2025-24264 affects WebKitGTK/WebKitGTK4: processing malicious web content may cause an unexpected crash in Safari; fixed in Apple platforms (visionOS 2.4, Safari 18.4, etc.) and in WebKitGTK packages across distros (Debian: webkit2gtk 2.48.x; Fedora/Amazon Linux advisories) by upgrading to pa...

CVE-2025-24264

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24212

This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24212

This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...