CVE-2025-24226

The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information...

CVE-2025-24218

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. An app may be able to access information about a user's contacts...

CVE-2025-24204

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data...

CVE-2025-24193

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...

CVE-2025-30470

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to read sensitive location information...

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity...

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...

CVE-2025-31191

This vulnerability exists in the Core Services framework on macOS, iOS, iPadOS, and tvOS . It stems from insufficient protection of service data within the GrantAccessToMultipleFiles interface, allowing an attacker to bypass App Sandbox protection mechanisms. Exploitation could enable unauthorize...

CVE-2025-30451

A security vulnerability in macOS allows an application to access sensitive user data due to inadequate redaction of sensitive information. This issue is resolved in macOS Sequoia 15.4 . Users are recommended to update to version 15.4 or later to mitigate this risk. Exploitation details or specif...

CVE-2025-24193

Vulnerabilities in iOS and iPadOS versions prior to 18.4 allow an attacker with a USB-C connection to an unlocked device to programmatically access photos . The root cause is a lack of proper authentication , which could lead to the disclosure of confidential information. Remediation is available...

CVE-2025-24202

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data...

CVE-2025-24182

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2025-24194

A logic issue exists in Apple operating systems, including iOS , iPadOS , macOS Sequoia , tvOS , visionOS , and watchOS . Processing maliciously crafted web content can lead to the disclosure of process memory . This vulnerability is addressed in iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , tvOS...

CVE-2025-24229

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be able to access sensitive user data...

CVE-2025-24229

A logic issue in macOS allows a sandboxed app to potentially access sensitive user data . This vulnerability has been addressed with improved checks in the following versions: macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . While a sighting was reported via Telegram, no spec...

CVE-2025-30437

A security vulnerability exists in Apple macOS where an application may be able to corrupt coprocessor memory . The root cause was addressed by implementing improved bounds checks . This issue is fixed in macOS Sequoia 15.4 . While the vulnerability's specific technical entry point is not detaile...

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24232

This vulnerability in macOS was addressed through improved state management . A malicious application could potentially exploit this issue to gain unauthorized access to arbitrary files . The flaw is resolved in the following versions: macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura ...

CVE-2025-24199

An uncontrolled format string issue exists in certain macOS versions, which may allow an application to trigger a denial-of-service (DoS) condition. This vulnerability was addressed by Apple through improved input validation . The issue is fixed in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and m...