CVE-2025-24204

This vulnerability in macOS allows an attacker to read any process memory on SIP-enabled systems. The root cause is the inclusion of an excessively powerful entitlement, com.apple.system-task-ports.read, in the gcore binary. Successful exploitation can lead to several critical impacts, including ...

CVE-2025-24212

A vulnerability in watchOS 11.4 allows an app to break out of its sandbox due to a path handling issue. The flaw was addressed with improved validation. Affected versions include iOS 18.4 , iPadOS 18.4 , iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , tvOS 18.4 ,...

CVE-2025-30454

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. A malicious app may be able to access private information...

CVE-2025-24250

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-24196

A type confusion vulnerability exists in macOS due to insufficient memory handling. An attacker with user privileges could exploit this issue to read kernel memory . This vulnerability is addressed in macOS Sequoia 15.4 and macOS Sonoma 14.7.5 . No specific exploit links or in-the-wild exploitati...

CVE-2025-24211

This issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. Processing a maliciously crafted video file may lead to unexpected app termination or...

CVE-2025-30439

CVE-2025-30439 is a vulnerability affecting Apple devices where an attacker with physical access to a locked device could potentially view sensitive user information . The issue was addressed by implementing improved checks . This vulnerability has been remediated in the following versions: iOS 1...

CVE-2025-24180

The Safari browser and associated Apple operating systems (iOS , iPadOS , macOS Sequoia , visionOS , and watchOS ) are vulnerable to a flaw where a malicious website could claim WebAuthn credentials from another website sharing a registrable suffix. The root cause is identified as insufficient in...

CVE-2025-24226

A security vulnerability in the IDE Assets component of the Xcode development environment (version 16.3 ) was identified due to insufficient protection of sensitive data and insufficient checks . A malicious app could exploit this flaw to gain unauthorized access to private information . This iss...

CVE-2025-24210

A logic error in ImageIO was addressed with improved error handling to prevent the disclosure of user information when parsing an image. This vulnerability affects various Apple operating systems, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . Affected versions include iOS 18.4 ...

CVE-2025-24210

A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an image may lead to disclosure of user information...

CVE-2025-31182

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to delete files for which it does not have permission...

CVE-2025-24237

A buffer overflow vulnerability was identified in BiometricKit (affecting Apple Watch Series 6 and later ) due to insufficient bounds checking. Exploitation of this flaw could allow an application to cause unexpected system termination . The issue has been addressed with improved bounds checking ...

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...

CVE-2025-30464

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-30433

This issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. A shortcut may be able to access files that are normally inaccessible to the...

CVE-2025-30444

A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciously crafted SMB network share may lead to system termination...

CVE-2025-24283

A logging issue in Apple products was addressed with improved data redaction. The vulnerability could allow an app to access sensitive user data . This issue is fixed in iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , visionOS 2.4 , and watchOS 11.4 . Specific details regarding the exploited compon...

CVE-2025-24190

A memory handling issue in the CoreMedia component of watchOS 11.4 (and other affected Apple platforms) allows processing a maliciously crafted video file to result in unexpected app termination or corrupt process memory . The vulnerability was addressed with improved memory handling. Affected sy...

CVE-2025-30429

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...