CVE-2025-43372

CVE-2025-43372 affects ImageIO on macOS Sonoma and related Apple OSes. The issue arises when processing a maliciously crafted media file, potentially causing an app termination or memory corruption. Apple fixed this with improved input validation, and the patch is included in macOS Sonoma 14.8.2 ...

CVE-2025-43355

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause a denial-of-service...

CVE-2025-43355

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to cause a denial-of-service...

CVE-2025-43302

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination...

CVE-2025-43358

CVE-2025-43358 concerns a permissions issue in Shortcuts where a malicious or misbehaving shortcut may bypass sandbox restrictions. Public details in connected documents indicate this affects Apple platforms and is mitigated by updates to macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 / iPadOS 1...

CVE-2025-43303

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43303

CVE-2025-43303 describes a logging issue that could allow an app to access sensitive user data. Fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26 and watchOS 26. Vulnerability characteristics: ATT&CK/exploit details not provided; CVSS 3.1 base score 5.5 (Local attack vector, Low attack complexity,...

CVE-2025-43342

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43272

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43317

CVE-2025-43317 describes a permissions issue in Apple platforms. The vulnerability may allow an app to access sensitive user data and is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The CVSS data indicate a local attack vector with low attack complexity, no privileges require...

CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. A website may be able to access sensor information without user consent...

CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-31255

CVE-2025-31255 is an authorization issue fixed by Apple in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26, and iPadOS 26, and macOS Sequoia 15.7. The vulnerability could allow an app to access sensitive user data due to improved state management. Connected sources provide explicit remediation thr...

CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed...

CVE-2025-43347

CVE-2025-43347 affects Apple OS ecosystem and was addressed by removing the vulnerable code. The NVD entry states the fix is in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26, with an input validation issue also addressed. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields...

PT-2025-44825

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 tvOS versions prior to 26 watchOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 visionOS versions prior to 26 Description A logic issue exists due to improved state management. A remote...

PT-2025-37843

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions 14.8 macOS Sequoia versions 15.7 macOS Tahoe versions 26 tvOS versions 26 iOS versions 18.7 and 26 iPadOS versions 18.7 and 26 visionOS versions 26 watchOS versions 26 Description An out-of-bounds write issue was addresse...

PT-2025-37782

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.8 macOS Sequoia versions prior to 15.7 macOS Tahoe versions prior to 26 tvOS versions prior to 26 watchOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description: An authorizatio...

PT-2025-37847

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 macOS versions prior to Tahoe 26 Description The issue was addressed with...