CVE-2025-30451

A security vulnerability in macOS allows an application to access sensitive user data due to inadequate redaction of sensitive information. This issue is resolved in macOS Sequoia 15.4 . Users are recommended to update to version 15.4 or later to mitigate this risk. Exploitation details or specif...

CVE-2025-24193

The iOS and iPadOS operating systems are vulnerable to an access control error that allows an attacker with a USB-C connection to an unlocked device to programmatically access photos . This issue was addressed through improved authentication and is fixed in versions iOS 18.4 and iPadOS 18.4 . Exp...

CVE-2025-24202

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data...

CVE-2025-24182

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2025-24194

A logic issue exists in several Apple operating systems, including iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , tvOS 18.4 , visionOS 2.4 , and watchOS 11.4 . Processing maliciously crafted web content can lead to the disclosure of process memory . This issue has been addressed with improved chec...

CVE-2025-24229

A logic issue in macOS allows a sandboxed app to potentially access sensitive user data . This vulnerability has been addressed with improved checks in the following versions: macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . While a sighting was reported via Telegram, no spec...

CVE-2025-24229

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be able to access sensitive user data...

CVE-2025-30437

A security vulnerability exists in Apple macOS where an application may be able to corrupt coprocessor memory . The root cause was addressed by implementing improved bounds checks . This issue is fixed in macOS Sequoia 15.4 . While the vulnerability's specific technical entry point is not detaile...

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24232

This vulnerability in macOS was addressed through improved state management . A malicious application could potentially exploit this issue to gain unauthorized access to arbitrary files . The flaw is resolved in the following versions: macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura ...

CVE-2025-24199

An uncontrolled format string issue exists in certain macOS versions, which may allow an application to trigger a denial-of-service (DoS) condition. This vulnerability was addressed by Apple through improved input validation . The issue is fixed in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and m...

CVE-2025-24204

This vulnerability in macOS allows an attacker to read any process memory on SIP-enabled systems. The root cause is the inclusion of an excessively powerful entitlement, com.apple.system-task-ports.read, in the gcore binary. Successful exploitation can lead to several critical impacts, including ...

CVE-2025-24212

A vulnerability in watchOS 11.4 allows an app to break out of its sandbox due to a path handling issue. The flaw was addressed with improved validation. Affected versions include iOS 18.4 , iPadOS 18.4 , iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , tvOS 18.4 ,...

CVE-2025-30454

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. A malicious app may be able to access private information...

CVE-2025-24196

A type confusion vulnerability exists in macOS due to insufficient memory handling. An attacker with user privileges could exploit this issue to read kernel memory . This vulnerability is addressed in macOS Sequoia 15.4 and macOS Sonoma 14.7.5 . No specific exploit links or in-the-wild exploitati...

CVE-2025-24250

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-24211

This issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. Processing a maliciously crafted video file may lead to unexpected app termination or...

CVE-2025-30439

CVE-2025-30439 is a vulnerability affecting Apple devices where an attacker with physical access to a locked device could potentially view sensitive user information . The issue was addressed by implementing improved checks . This vulnerability has been remediated in the following versions: iOS 1...

CVE-2025-24180

The Safari browser and associated Apple operating systems (iOS , iPadOS , macOS Sequoia , visionOS , and watchOS ) are vulnerable to a flaw where a malicious website could claim WebAuthn credentials from another website sharing a registrable suffix. The root cause is identified as insufficient in...

CVE-2025-24226

A security vulnerability in the IDE Assets component of the Xcode development environment (version 16.3 ) was identified due to insufficient protection of sensitive data and insufficient checks . A malicious app could exploit this flaw to gain unauthorized access to private information . This iss...