UBUNTU-CVE-2025-24208

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack...

CVE-2025-24167

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated...

CVE-2025-24167

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated...

CVE-2025-30470

A path handling issue was identified in multiple Apple products, which could allow an application to read sensitive location information . This vulnerability has been addressed with improved logic in iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , vision...

CVE-2025-30427

A use-after-free vulnerability exists in the WebKitGTK web engine and Safari browser, where the issue stems from improper memory management. Processing maliciously crafted web content can lead to an unexpected process crash or Safari crash . The vulnerability has been addressed in Safari 18.4 , i...

CVE-2025-24215

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information...

CVE-2025-24215

The CloudKit component in iPadOS and macOS is vulnerable to a lack of access control (CWE-284), which may allow a malicious app to gain unauthorized access to private information . This issue has been addressed with improved checks in iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and...

CVE-2025-24215

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information...

CVE-2025-24203

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system...

CVE-2025-24203

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system...

CVE-2025-24203

A kernel vulnerability in iOS , iPadOS , and macOS allows an attacker to gain read and write access to data by modifying protected parts of the file system. The root cause is attributed to deficiencies in access control , specifically a kernel bug that enables the temporary zeroing out of files i...

CVE-2025-24192

Apple addressed a script imports issue involving insufficient isolation, which could allow a website to leak sensitive data . This vulnerability affects Safari, iOS, iPadOS, macOS Sequoia, and visionOS . The issue has been remediated in Safari 18.4, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, and ...

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. Visiting a website may leak sensitive data...

CVE-2025-31191

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-24238

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges...

CVE-2025-24193

The iOS and iPadOS operating systems are vulnerable to an access control error that allows an attacker with a USB-C connection to an unlocked device to programmatically access photos . This issue was addressed through improved authentication and is fixed in versions iOS 18.4 and iPadOS 18.4 . Exp...

CVE-2025-24193

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

CVE-2025-24193

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

CVE-2025-24202

A logging issue exists in iOS , iPadOS , and macOS that allows an application to potentially access sensitive user data . The root cause involves a deficiency in data redaction within the logging system. This vulnerability is resolved in iOS 18.4 , iPadOS 18.4 , and macOS Sequoia 15.4 . While the...

CVE-2025-24097

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata...