84 matches found
CVE-2025-43315
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access user-sensitive data...
CVE-2025-43291
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system...
CVE-2025-43204
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...
CVE-2025-43204
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...
CVE-2025-43204
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...
CVE-2025-43204
CVE-2025-43204 targets macOS Tahoe 26, with the underlying issue described as vulnerable code being removed to fix a sandbox breakout risk. Affected product: macOS Tahoe 26. Root cause: removal of the vulnerable code (no further technical specifics provided in the documents). Impact: an app may b...
CVE-2025-43291
CVE-2025-43291 is a permissions issue in macOS Sequoia (15.7) and macOS Sonoma (14.8) addressed by removing the vulnerable code. The issue could allow an app to modify protected parts of the filesystem. Apple lists this CVE under the SharedFileList and notes the fix as part of security content fo...
CVE-2025-43330
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to break out of its sandbox...
CVE-2025-43347
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed...
CVE-2025-43347
CVE-2025-43347 affects Apple OS ecosystem and was addressed by removing the vulnerable code. The NVD entry states the fix is in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26, with an input validation issue also addressed. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields...
PT-2025-37842
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 26 iPadOS versions prior to 26 macOS versions prior to Tahoe 26 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 Description: An input validation issue was addressed by removing the...
PT-2025-37789
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application may be able to break out of its sandbox due to vulnerable code. The issue was addressed by removing the vulnerable code. Recommendations: Update to macOS Tahoe 26 or later...
CVE-2025-43187
Summary (CVE-2025-43187) This macOS-specific vulnerability arises from the hdiutil path where running the command may unexpectedly execute arbitrary code. The issue was mitigated by removing the vulnerable code and is fixed in macOS updates: Sonoma 14.7.7, Ventura 13.7.7, and Sequoia 15.6. The NV...
CVE-2025-43222
A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An attacker may be able to cause unexpected app termination...
CVE-2025-43198
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data...
CVE-2024-27800
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing a maliciously crafted message may lead to a...
CVE-2023-23502
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout...
CVE-2025-31218
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...
CVE-2025-31201
This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that...
