PT-2025-44879

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 visionOS versions prior to 26.1 watchOS versions prior to 26.1 iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 tvOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 Description An...

PT-2025-44889

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description Processing maliciously crafted web content may lead to an unexpected process crash due to improper state management. Recommendations Update to iOS version 18.7.2. Update ...

EUVD-2025-29282

Malicious code in bioql PyPI...

EUVD-2025-25409

Malicious code in bioql PyPI...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

CVE-2025-43400

An out-of-bounds write vulnerability exists in the FontParser component of several Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The root cause is a lack of proper bounds checking when processing a maliciously crafted font . Successful exploitation can lead ...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc. in the U.S. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. apple visionOS is an operating system for AR glasses. A security vulnerability exists in multiple Apple products that...

The vulnerability of the Audio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS allows a hacker to trigger a service failure.

The vulnerability of the Audio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS lies in reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Web page rendering module in Safari web browsers of iOS operating systems, iPadOS, macOS, allows attackers to trigger a service failure.

The vulnerability of the Web page rendering module in WebKit of Safari browsers for iOS operating systems, iPadOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Notes component in iOS and iPadOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Notes component in iOS and iPadOS operating systems is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-43354

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

The vulnerability of the Safari browser in iOS and iPadOS operating systems, related to incorrect authentication, allows a hacker to redirect users to any arbitrary URL address.

The vulnerability of the Safari browser in iOS and iPadOS operating systems is related to improper authentication. Exploiting this vulnerability allows a malicious actor to redirect a user to an arbitrary URL address...

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43358

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. A shortcut may be able to bypass sandbox restrictions...

CVE-2025-43317

A permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 26, tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-31254

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection...

CVE-2025-43349

An out-of-bounds write vulnerability exists in several Apple operating systems, including iOS 18.7 , iPadOS 18.7 , iOS 26 , iPadOS 26 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , macOS Tahoe 26 , tvOS 26 , visionOS 26 , and watchOS 26 . The root cause is a failure in input validation when processin...

CVE-2025-43190

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43368

A use-after-free issue exists in the web page rendering module of WebKit , affecting Safari browsers on iOS , iPadOS , and macOS Tahoe . The root cause is linked to improper memory management, where memory is used after it has been freed. Processing maliciously crafted web content can trigger thi...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...