The vulnerability of iPadOS and iOS operating systems lies in the improper handling of the link before accessing files. This allows attackers to gain access to read and write system files.

The vulnerability of iPadOS and iOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to gain access to read and write system files...

The vulnerability of the Password Autofill component in operating systems such as visionOS, iOS, iPadOS, MacOS, and watchOS allows attackers to read and write arbitrary files.

The vulnerability of the Password Autofill component in the visionOS, iOS, iPadOS, MacOS, and watchOS operating systems is related to the absence of authentication. Exploiting this vulnerability allows attackers to read and write arbitrary files...

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS, related to writing beyond the memory buffer, allows attackers to damage memory.

The vulnerabilities of the operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS are related to writing beyond the buffer boundaries of memory. Exploiting these vulnerabilities can allow attackers to corrupt memory...

Vulnerability of operating systems such as iOS, iPadOS, tvOS, MacOS, watchOS, and visionOS, due to errors in state management, allows attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems such as iOS, iPadOS, tvOS, macOS, watchOS, and visionOS are related to state management errors. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential information...

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS, related to operations beyond the buffer boundaries of memory, allows attackers to damage memory resources.

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to damage memory resources...

Astra Linux – Vulnerability in WebKit2GTK

A privacy issue was addressed through improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3, and iPadOS 18.3, as well as macOS Sequoia 15.3. Copying a URL from the Web Inspector may lead to command injection...

The vulnerability of the kauth_cred_proc_update() function in the operating system kernels of macOS and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the kauthcredprocupdate function in the macOS and iPadOS operating systems is related to synchronization errors when using a shared resource a “race condition”. This occurs when an operation goes beyond the buffer in memory. Exploiting this vulnerability can allow a remote...

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2025-19515)

Apple macOS Sequoia is an operating system from Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer from Apple Inc. A denial of service vulnerability exists in several Apple products, which can be exploited by...

About the security content of iPadOS 17.7.5

About the security content of iPadOS 17.7.5 This document describes the security content of iPadOS 17.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS allows a attacker to execute arbitrary code.

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the CoreMedia component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows attackers to gain increased privileges.

The vulnerability of the CoreMedia component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

DEBIAN-CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24159

A validation issue was addressed with improved logic. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2025-24118

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2025-24123

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24127

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24107

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3 and iPadOS 18.3. A malicious app may be able to gain root privileges...

CVE-2025-24113

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing...

CVE-2024-54542

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, macOS Sequoia 15.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2. Private Browsing tabs may be accessed without authentication...

CVE-2024-54522

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory...