CVE-2025-31209

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to disclosure of user information...

CVE-2025-31213

A logging issue in iPadOS 17.7.7 , macOS Sequoia 15.5 , macOS Sonoma 14.7.6 , and macOS Ventura 13.7.6 allows an application to potentially access associated usernames and websites within a user's iCloud Keychain . The root cause is a lack of sufficient data redaction in logs, which can lead to i...

CVE-2025-31213

A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to access associated usernames and websites in a user's iCloud Keychain...

CVE-2025-31205

The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin...

CVE-2025-30448

A vulnerability in iCloud Document Sharing allows an attacker to turn on sharing for an iCloud folder without authentication. This issue was caused by insufficient entitlement checks. The vulnerability affects macOS Ventura 13.7.6 , iPadOS 17.7.7 , iOS 18.5 , iPadOS 18.5 , macOS Sequoia 15.4 , ma...

CVE-2025-31234

The CVE-2025-31234 vulnerability affects iOS 18.5 , iPadOS 18.5 , macOS Sequoia 15.5 , tvOS 18.5 , and visionOS 2.5 . The root cause is improper input sanitization , which could allow an attacker to corrupt kernel memory or cause unexpected system termination . This issue is resolved in the afore...

CVE-2025-31234

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5. An attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-31222

A correctness issue exists in several Apple operating systems, including iOS 18.5 , iPadOS 18.5 , macOS Sequoia 15.5 , macOS Sonoma 14.7.6 , macOS Ventura 13.7.6 , tvOS 18.5 , visionOS 2.5 , and watchOS 11.5 . This flaw may allow a user to elevate privileges . The issue has been addressed with im...

CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A user may be able to elevate privileges...

CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A user may be able to elevate privileges...

CVE-2025-31214

A vulnerability exists in the Baseband component of iOS and iPadOS operating systems, where confidential information is transmitted in plaintext . An attacker in a privileged network position can exploit this to remotely intercept network traffic . This issue was addressed through improved state ...

CVE-2025-31214

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2025-31242

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.3, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. An a...

CVE-2025-31239

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Parsing a file may lead to an unexpected app termination...

CVE-2025-31215

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-31215

Processing maliciously crafted web content may lead to an unexpected process crash due to a vulnerability addressed with improved checks. This issue affects various Apple products and software components, including Safari 18.5 , iOS 18.5 , iPadOS 18.5 , iPadOS 17.7.7 , macOS Sequoia 15.5 , tvOS 1...

CVE-2025-24144

An information disclosure vulnerability exists in several Apple operating systems, where an application may be able to leak sensitive kernel state . This issue was addressed by removing the vulnerable code. The vulnerability is fixed in iOS 18.3 , iPadOS 18.3 , iPadOS 17.7.7 , macOS Sequoia 15.3 ...

CVE-2025-24144

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to leak sensitive kernel state...

CVE-2025-31235

A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to cause unexpected system termination...

CVE-2025-31223

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...