CVE-2025-43309

A logic issue in Apple iOS and iPadOS versions prior to 26 allows an attacker with physical access to a device to view notification contents from the Lock Screen . This vulnerability was addressed by implementing improved checks, and the fix is available in iOS 26 and iPadOS 26 .

CVE-2025-43427

A flaw in WebKitGTK , WPE WebKit , and Safari allows processing maliciously crafted web content to cause an unexpected process crash due to insufficient state management and input validation. The issue affects Apple products including iOS , iPadOS , tvOS , visionOS , and macOS Tahoe , as well as ...

CVE-2025-43322

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access user-sensitive data...

CVE-2025-43322

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43495

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission...

CVE-2025-43505

Apple Xcode versions prior to 26.1 are vulnerable to an out-of-bounds write issue caused by insufficient input validation . An attacker could exploit this by providing a maliciously crafted file , which may lead to heap corruption . The vulnerability has been addressed in Xcode 26.1 through impro...

CVE-2025-43401

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. A remote attacker may be able to cause a denial-of-service...

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin...

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin...

CVE-2025-43414

A permissions issue in macOS allows a shortcut to access files that are normally inaccessible to the Shortcuts app . The root cause is a lack of sufficient privilege authentication and improper validation processes. This vulnerability affects macOS Sonoma prior to 14.8.2, macOS Sequoia prior to 1...

CVE-2025-43414

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

CVE-2025-43414

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

CVE-2025-43455

A privacy issue in the Apple Account component across iOS , iPadOS , watchOS , and visionOS (versions prior to 26.1 ) allows malicious applications to capture screenshots of sensitive information within embedded views. The vulnerability stems from insufficient privacy checks and isolation policie...

CVE-2025-43360

The issue was addressed with improved UI. This issue is fixed in iOS 26 and iPadOS 26. Password fields may be unintentionally revealed...

CVE-2025-43360

The issue was addressed with improved UI. This issue is fixed in iOS 26 and iPadOS 26. Password fields may be unintentionally revealed...

CVE-2025-43481

A security vulnerability exists in Apple macOS Sequoia versions prior to 15.7.2 , originating from insufficient sandbox checking . This flaw could allow an application to break out of its sandbox restrictions. The issue was addressed with improved checks. This vulnerability is fixed in macOS Sequ...

CVE-2025-43448

This issue was addressed with improved validation of symlinks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to break out of its sandbox...

PT-2025-44820

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26 iPadOS versions prior to 26 Description A flaw exists where password fields may be unintentionally revealed due to improved UI. Recommendations Update to iOS version 26 or later. Update to iPadOS version 26 or later...

PT-2025-44891

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information...

PT-2025-44810

A logic issue was addressed with improved checks. This issue is fixed in iOS 26 and iPadOS 26. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen...