CVE-2025-24218

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. An app may be able to access information about a user's contacts...

CVE-2025-24226

The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information...

CVE-2025-24204

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data...

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...

CVE-2025-24193

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

CVE-2025-30470

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to read sensitive location information...

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity...

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...

CVE-2025-31191

CVE-2025-31191 is a macOS sandbox escape vulnerability fixed in Apple security updates (Ventura 13.7.5, Sequoia 15.4, Sonoma 14.7.5, iOS 18.4, etc.). The connected Microsoft threat research details a sandbox-escape chain abusing security-scoped bookmarks and the keychain. Attackers could leverage...

CVE-2025-30451

CVE-2025-30451 concerns macOS Sequoia. The issue allows an app to access sensitive user data due to inadequate redaction. Apple fixes the vulnerability in macOS Sequoia 15.4, with mitigation described as improved redaction of sensitive information. The CVSS metrics indicate a local, low complexit...

CVE-2025-24193

CVE-2025-24193 affects iOS and iPadOS where an attacker with a USB-C connection to an unlocked device could programmatically access photos. Apple states the issue was addressed with improved authentication and the fix is in iOS 18.4 and iPadOS 18.4. The CVSS base score is low (2.4, LOW) with phys...

CVE-2025-24202

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data...

CVE-2025-24182

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2025-24194

CVE-2025-24194 is a logic issue fixed in visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. It concerns processing maliciously crafted web content, which could disclose process memory. The CVSSv3.1 base score is 6.5 (MEDIUM), with network access required and no privileges, wh...

CVE-2025-24229

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be able to access sensitive user data...

CVE-2025-24229

Technical details about CVE-2025-24229 are not publicly provided in the supplied documents. Monitor for updates from Apple advisories and CVE databases for affected components, impact, and mitigations.

CVE-2025-30437

CVE-2025-30437 affects macOS Sequoia 15.4 and is mitigated by the Sequoia 15.4 update. The issue is described as an out-of-bounds/bounds-check problem that could allow an app to corrupt coprocessor memory. Apple’s advisory states the fix involved improved bounds checks and that the vulnerability ...

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24232

This CVE affects macOS, where the issue was addressed by improved state management and fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The vulnerability could allow a malicious app to access arbitrary files due to the underlying state-management flaw. Remediation is to...

CVE-2025-24199

CVE-2025-24199 describes an uncontrolled format string issue in macOS components that is fixed by Apple in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The root cause relates to insufficient input validation, with the public description noting that an application may be able...