CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43447

CVE-2025-43447 describes a memory handling issue that may allow a local attacker to cause an unexpected system termination or corrupt kernel memory. Affected: iOS 26.1, iPadOS 26.1, watchOS 26.1, macOS Tahoe 26.1, and visionOS 26.1 (Vision Pro). Mitigation: patch/updates released with improved me...

CVE-2025-43502

This CVE pertains to a privacy issue in Apple platforms that could allow an app to bypass certain Privacy preferences. Affected products include iOS, iPadOS, macOS Tahoe, visionOS, and Safari, with fixes implemented in version 26.1 across these platforms. The underlying description repeatedly not...

CVE-2025-43493

The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...

CVE-2025-43503

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to user interface spoofing...

CVE-2025-43407

This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox...

CVE-2025-43379

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data...

CVE-2025-43441

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43441

The CVE-2025-43441 vulnerability is addressed by improved memory handling, with fixes in Safari 26.1, iOS 18.7.2 / iPadOS 18.7.2, iOS 26.1 / iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, and visionOS 26.1. Affected products are Apple platforms where processing maliciously crafted web content could le...

CVE-2025-43441

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43457

CVE-2025-43457 is a use-after-free in WebKitGTK/web content processing that can crash Safari-based engines. Public notes confirm fixes in WebKitGTK/WebKit components across multiple distributions: Debian/DSA-6172-1 and Debian security tracker list WebKitGTK 2.50.6-1 (for oldstable/trixie) with th...

CVE-2025-43338

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...

CVE-2025-43436

CVE-2025-43436 is a permissions issue affecting Apple OS components (notably CoreServices) where an app may enumerate a user’s installed apps. The connected Nessus entry for Apple TV (and related Apple platforms) confirms CoreServices involvement and ties the CVE to an exposure of installed apps....

CVE-2025-43436

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps...

CVE-2025-43436

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps...

CVE-2025-43460

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2025-43323

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user...

CVE-2025-43495

CVE-2025-43495 affects iOS and iPadOS where a keystroke monitoring issue existed. The vulnerability is addressed by Apple in iOS 18.7.2 and iPadOS 18.7.2, and in iOS 26.1 and iPadOS 26.1, per the CVE description and Apple security content. Connected documents corroborate that an app may be able t...

CVE-2025-43495

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission...

CVE-2025-43440

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...