Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices, Apple tvOS is a smart TV operating system, and Apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products, which stems from a shortcut that may bypass sandboxing restrictions. The...

PT-2025-44817

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8 macOS Sequoia versions prior to 15.7 tvOS versions prior to 26 watchOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 iOS versions prior to 18.7 iPadOS versions prior to 18.7...

PT-2025-44812

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 26 tvOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 watchOS versions prior to 26 Description An application may be capable of fingerprinting a user. The issue was resolved through the...

CVE-2025-43368: Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2025-48889

Уязвимость компонента WebKit операционных систем iOS, iPadOS, visionOS, watchOS и браузера Safari связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, вызвать отказ в обслуживании...

CVE-2025-43343: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...

PT-2025-44816

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 iOS versions prior to 17.0 iPadOS versions prior to 17.0 Description An out-of-bounds access issue exists due to insufficient bounds checking. Processing a specially crafted media file could cause an application ...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices, Apple tvOS is a smart TV operating system, and Apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products that stems from a UDP server socket that may be incorrectly bound to all...

CVE-2025-31254: Incorrect Authorization

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection...

PT-2025-44821

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26 iPadOS versions prior to 26 macOS Sonoma versions prior to 14.8.2 macOS Sequoia versions prior to 15.7.2 tvOS versions prior to 26 watchOS versions prior to 26 visionOS versions prior to 26 Description An out-of-bounds...

PT-2025-37849

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 iOS versions prior to 18.7 iPadOS versions prior to 18.7 macOS versions prior to Tahoe 26 iOS versions prior to 26 iPadOS versions prior to 26 Description A permissions...

CVE-2025-43357: Exposure of Private Personal Information to an Unauthorized Actor

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to fingerprint the user...

CVE-2025-43349: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing a maliciously crafted video file may lead to...

CVE-2025-43347: Improper Input Validation

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed...

CVE-2025-43329: Missing Authorization

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to break out of its sandbox...

CVE-2025-30468: Weak Authentication

This issue was addressed through improved state management. This issue is fixed in iOS 26 and iPadOS 26. Private Browsing tabs may be accessed without authentication...

PT-2025-37795

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.48.7-0ubuntu0.25.04.2 WebKitGTK affected versions not specified Description WebKitGTK is a port of the WebKit web rendering engine to the GTK platform. Several security issues were discovered in the WebKitGTK Web...

CVE-2025-43272: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43356: Exposure of Sensitive Information to an Unauthorized Actor

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent...

PT-2025-37854

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 macOS Tahoe versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description A use-after-free issue was addressed with improved memory management. Processing maliciously crafted web content may...