CVE-2025-24190

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2025-30429

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24217

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-30469

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen...

CVE-2025-30469

This vulnerability affects iOS and iPadOS versions prior to 18.4 . Due to a flaw in state management , an individual with physical access to an affected device may be able to access photos from the lock screen. The issue has been resolved in iOS 18.4 and iPadOS 18.4 ; users are recommended to upd...

CVE-2025-30469

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen...

CVE-2025-24095

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences...

CVE-2025-24095

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privacy preferences...

CVE-2025-24095

A vulnerability in iOS , iPadOS , and visionOS allows an application to bypass Privacy preferences . The root cause was addressed by implementing additional entitlement checks . This issue is resolved in iOS 18.4 , iPadOS 18.4 , and visionOS 2.4 . Exploitation details are not provided in the docu...

CVE-2025-24216

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24216

The WebKitGTK component in MiracleLinux 8 , MiracleLinux 9 , Mageia , and TencentOS is vulnerable to an issue where processing maliciously crafted web content may lead to an unexpected Safari crash . The root cause is attributed to improper memory handling, and the vulnerability is addressed by i...

CVE-2025-30428

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2025-30428

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2025-30428

A vulnerability in iOS and iPadOS allows photos stored in the Hidden Photos Album to be viewed without proper authentication. The root cause is attributed to issues in state management . This issue has been addressed in iOS 18.4 , iPadOS 18.4 , and iPadOS 17.7.6 . No specific exploit details or l...

CVE-2025-24257

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2025-31184

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network...

CVE-2025-30465

A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to th...

CVE-2025-30465

A permissions issue in the Shortcuts app allows a shortcut to access files that are normally inaccessible to the application. This vulnerability was addressed by improving validation processes. The issue is fixed in iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sequoia 15.7.2 , macOS Sonoma 14.7.5 ,...

CVE-2025-30465

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

PT-2025-13961 · Apple · Macos Sequoia +5

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 tvOS versions prior to 18.4 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 iPadOS versions prior to 17.7.6 Description: A malicious website may be able to track user...