PT-2025-14001 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue allows an app to gain unauthorized access to the Local Network d...

PT-2025-13871 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 tvOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. An ap...

PT-2025-13905

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Safari versions prior to 18.4 Description The issue was...

PT-2025-13996 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 visionOS versions prior to 2.4 Description: A path handling issue was...

PT-2025-13962 · Apple · Macos Sequoia +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue allows an app to potentially...

PT-2025-18131 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 tvOS versions prior to 18.4 visionOS versions prior to 2.4 Description: A null pointer dereference issue was addressed through improved input...

PT-2025-13902

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 18.4 Safari versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description A type confusion issue could lead to memory...

Blasting Past Webp

An analysis of the NSO BLASTPASS iMessage exploit Posted by Ian Beer, Google Project Zero On September 7, 2023 Apple issued an out-of-band security update for iOS: Around the same time on September 7th 2023, Citizen Lab published a blog post linking the two CVEs fixed in iOS 16.6.1 to an "NSO Gro...

CVE-2024-54551

CVE-2024-54551 is a denial-of-service vulnerability in web content processing within WebKit-based components. The connected documents indicate the issue is addressed by memory-handling improvements and fixes in specific Apple platforms: watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, vis...

CVE-2024-44276

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2. A user in a privileged network position may be able to leak sensitive information...

CVE-2022-48610

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data...

CVE-2022-48610

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data...

CVE-2024-54560

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be able to modify other apps without having App Management permission...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report...

Apple fixes zero-day vulnerability used in “extremely sophisticated attack”

Apple has released an emergency security update for a vulnerability which it says may have been exploited in an "extremely sophisticated attack against specific targeted individuals.” The update is available for: iOS 18.3.1 and iPadOS 18.3.1 - iPhone XS and later, iPad Pro 13-inch, iPad Pro...

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update

Apple on Monday released out-of-band security updates to address a security flaw in iOS and iPadOS that it said has been exploited in the wild. Assigned the CVE identifier CVE-2025-24200 CVSS score: 4.6, the vulnerability has been described as an authorization issue that could make it possible fo...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely...

CVE-2024-44204

A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's saved passwords may be read aloud by VoiceOver...

CVE-2025-24177

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker on the local network may be able to cause a denial-of-service...