3422 matches found
CVE-2025-43207
This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data...
CVE-2025-43231
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data...
CVE-2025-24197
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-24197
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access sensitive user data...
CVE-2025-43294
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in tvOS 26.1, macOS Tahoe 26, watchOS 26.1, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...
CVE-2025-43312
A buffer overflow vulnerability exists in Apple macOS due to insufficient boundary checking. This flaw could allow an application to cause unexpected system termination . Affected versions include macOS Sequoia prior to 15.7, macOS Sonoma prior to 14.8, and macOS Tahoe prior to 26. The issue has ...
CVE-2025-43305
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...
CVE-2025-43305
A logic issue in CoreServices on macOS allows a malicious application to access private information . This vulnerability was addressed with improved checks and is fixed in macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . No specific exploit details or in-the-wild exploitation records...
CVE-2025-43295
A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...
CVE-2025-43299
A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...
CVE-2025-43299
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...
CVE-2025-43375
The Xcode integrated development environment for macOS (specifically the Dev Tools component) is vulnerable to a Denial of Service (DoS) condition. The root cause is a path handling issue where processing an overly large path value or copying buffers without checking input data size can trigger a...
CVE-2025-43231
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data...
CVE-2025-43231
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data...
CVE-2025-43231
A logic issue in macOS Sonoma allows an application to potentially access sensitive user data . The vulnerability was addressed with improved checks and is fixed in macOS Sonoma 14.8 . Exploitation details are not provided in the documents.
CVE-2025-43342
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-43342
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...