CVE-2025-24221

CVE-2025-24221 affects Apple devices and is addressed by patches in visionOS 2.4, iOS 18.4, iPadOS 18.4, and iPadOS 17.7.6. The root cause is improved data access restriction that prevents unauthorized exposure of keychain data in iOS backups. Impact is that sensitive keychain data may have been ...

CVE-2025-24221

This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup...

CVE-2025-24217

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-24240

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data...

CVE-2025-24240

CVE-2025-24240 describes a race condition in macOS that could let an app access user-sensitive data. The issue is fixed in macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. Affected component: the operating system’s handling that allowed local access to sensitive data under a race c...

CVE-2025-24240

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data...

Unsolved Challenge: Why API Access Control Vulnerabilities Remain a Major Security Risk

Despite advancements in API security, access control vulnerabilities, such as broken object-level authentication BOLA and broken function-level authentication BFLA, remain almost impossible to detect. This blog will explore why these vulnerabilities are so difficult to detect, the limitations of...

PT-2025-13895 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 iPadOS versions prior to 17.7.6 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: An authorization issue was...

PT-2025-13894

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.4 Description The issue allows an app to potentially access protected user data due to inadequate checks. This has been addressed with improved checks. Recommendations For versions prior to 15.4, update to macOS...

PT-2025-13918 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 macOS versions prior to 14.7.5 Description: An access issue was addressed with additional sandbox restrictions. This issue allows an app to potentially access sensitive user data. Recommendations: For macOS versio...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that originates from websites that may be able to access...

PT-2025-13970 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows a sandboxed app to potentially access sensitive user data in system logs. This is due to inadequate redaction of sensitive information. The estimated number of potentially affected...

PT-2025-13908 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 and 17.7.6 Description: This issue was addressed with improved data access restriction. Sensitive keychain data may be accessible from an iOS backup...

About the security content of iPadOS 17.7.6

About the security content of iPadOS 17.7.6 This document describes the security content of iPadOS 17.7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of visionOS 2.4

About the security content of visionOS 2.4 This document describes the security content of visionOS 2.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from a competitive condition that could cause applications to access sensitive user data...

PT-2025-23207 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A permissions issue was addressed with additional sandbox restrictions, which may have allowed an app to access protected user data...

PT-2025-13928 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: An injection issue was addressed with improved validation, which may allow an app to access user-sensitive data...

PT-2025-13991 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue allows an app to potentially access sensitive user data due to inadequate restriction of data container access. This has been...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which arises from the possibility that an application could...