CVE-2025-43329

A permissions issue in various Apple operating systems allows an application to break out of its sandbox . This vulnerability is rooted in authentication process errors that allow attackers to bypass sandbox security mechanisms. Affected products include iOS, iPadOS, tvOS, watchOS, and macOS . Th...

CVE-2025-43299

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...

CVE-2025-43299

A denial-of-service issue was identified in the libc component of Apple's operating systems. The root cause was a lack of proper validation, which could allow an app to cause a system crash or denial-of-service. This vulnerability was addressed with improved validation in the following versions: ...

CVE-2025-43299

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...

CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...

CVE-2025-43355

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to cause a denial-of-service...

CVE-2025-43355

A type confusion issue exists in several Apple operating systems due to improper memory handling. This vulnerability could allow an application to trigger a denial-of-service (DoS) . Affected platforms include iOS 18.7 , iPadOS 18.7 , iOS 26 , iPadOS 26 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , ...

CVE-2025-43302

An out-of-bounds write issue exists in the IOHIDFamily input/output device management component on watchOS 26 (Apple Watch Series 6 and later). The vulnerability was addressed with improved bounds checking, and an app may be able to cause unexpected system termination . This issue is fixed in iOS...

CVE-2025-43359

A logic issue was addressed with improved state management. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. A UDP server socket bound to a local interface may become bound to all...

CVE-2025-43358

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A shortcut may be able to bypass sandbox restrictions...

CVE-2025-43362

The issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An app may be able to monitor keystrokes without user permission...

CVE-2025-43354

A logging issue was addressed with improved data redaction. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data...

CVE-2025-43342

A correctness issue in the WebKit engine, specifically within the webkitgtk and webkitgtk4 components, allows an attacker to cause an unexpected process crash by processing maliciously crafted web content. This vulnerability affects several platforms, including Safari (version 26), iOS (18.7 and ...

CVE-2025-43357

A security vulnerability in the Call History module of iOS , iPadOS , and macOS allows an app to fingerprint the user due to insufficient redaction of sensitive information. Apple addressed this issue by improving the redaction of sensitive data. This vulnerability affects various devices, includ...

CVE-2025-43357

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user...

CVE-2025-43357

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user...

CVE-2025-43272

A memory handling vulnerability exists in the WebKit component across multiple platforms, including Safari , iOS , iPadOS , macOS Tahoe , visionOS , and watchOS . Processing maliciously crafted web content can lead to an unexpected Safari crash or service failure . The issue was specifically iden...

CVE-2025-43317

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in visionOS 26, tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An input validation issue was addressed...