The vulnerability of macOS and iPadOS systems, related to access control deficiencies, allows attackers to circumvent existing security restrictions and gain unauthorized access to sensitive information.

The vulnerabilities of macOS and iPadOS are related to lack of access control mechanisms. Exploiting these vulnerabilities allows a remote attacker to bypass existing security restrictions and gain unauthorized access to sensitive information...

The vulnerability of the UI components in operating systems such as visionOS, iOS, iPadOS, macOS, and the Safari browser allows attackers to gain unauthorized access to confidential data.

The vulnerability of the UI components in operating systems such as visionOS, iOS, iPadOS, macOS, and the Safari browser is related to an improper limitation on the layers of the user interface that can be displayed. Exploiting this vulnerability may allow a remote attacker to gain unauthorized...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 26.1, iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1. A malicious website may exfiltrate data across origins...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 18.2, iOS 18.2, iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, and watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...

SUSE CVE-2025-24150

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report...

CVE-2024-27859

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report...

CVE-2024-27859

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution...

CVE-2024-27859

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution...

CVE-2024-54658

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to a denial-of-service...

CVE-2024-54658

CVE-2024-54658 is a memory-handling issue in processing web content that can lead to a denial-of-service. The primary public description states the fix is in Apple software: iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, and macOS Sonoma 14.4. The vulnerability is m...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely...

About the security content of iOS 18.3.1 and iPadOS 18.3.1

About the security content of iOS 18.3.1 and iPadOS 18.3.1 This document describes the security content of iOS 18.3.1 and iPadOS 18.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Apple iPadOS 安全漏洞

Apple iPadOS is an operating system for the iPad tablet computer from Apple USA. A security vulnerability exists in Apple iPadOS version 17.7.5 that originates from a physical attack that could disable USB Restricted Mode on a locked device...

PT-2025-6097

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.3.1 iPadOS versions prior to 18.3.1 iPadOS versions prior to 17.7.5 Description A physical attack may disable USB Restricted Mode on a locked device. This issue is related to an authorization problem that has been...

The vulnerability of the AirPlay implementation in operating systems macOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the AirPlay implementation in macOS, iOS, and iPadOS relates to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebKit component in the Safari browser on macOS, iOS, iPadOS, tvOS, and visionOS operating systems is related to the absence of authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information remote...

The vulnerability of the ARKit interface allows attackers to trigger a service failure on operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS.

The vulnerability of the ARKit interface in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...