CVE-2025-31242

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.3, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. An a...

CVE-2025-30453

The CVE-2025-30453 issue affects macOS DiskArbitration and was fixed by Apple in macOS Sequoia 15.4, macOS Ventura 13.7.6, and macOS Sonoma 14.7.6. Description indicates a local, privilege-escalation vulnerability where a malicious app could gain root privileges due to insufficient permissions ch...

CVE-2025-30453

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.4, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. A malicious app may be able to gain root privileges...

CVE-2025-30453

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. A malicious app may be able to gain root privileges...

CVE-2025-24144

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to leak sensitive kernel state...

CVE-2025-31235

A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to cause unexpected system termination...

CVE-2025-31235

CVE-2025-31235 is a local, memory‑corruption issue in Apple’s coreaudiod where a double‑free leads to an out‑of‑bounds or invalid dereference chain. The connected Google Project Zero write‑up explicates exploitation context for CVE-2025-31235 in coreaudiod alongside CVE-2024-54529, detailing how ...

CVE-2025-31223

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-31258

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox...

CVE-2025-31258

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox...

CVE-2025-31258

CVE-2025-31258 affects macOS, with a potential sandbox escape via the RemoteViewServices mechanism. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sequoia 15.5 (Apple’s advisory confirms the patch). Affected products prior to the Sequoia 15.5 release could be expose...

PT-2025-20794 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

PT-2025-20770

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.7.7 macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description A privacy issue was addressed by removing sensitive data. A malicious app may be able...

PT-2025-20745 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.5 Description: The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. Recommendations: For versions prior to 15.5, update t...

About the security content of macOS Sequoia 15.5

About the security content of macOS Sequoia 15.5 This document describes the security content of macOS Sequoia 15.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2025-20734 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.5 Description: A file quarantine bypass issue was addressed with additional checks, which may have allowed an app to break out of its sandbox. Recommendations: For versions prior to 15.5, update to macOS...

PT-2025-20790 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue was addressed with improved memory handling. Connecting to a malicious AFP server may corrupt kernel memory. Recommendations: For macOS versions prior t...

PT-2025-20778 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: A logic issue was addressed with improved checks, which may have allowed a sandboxed app to access sensitive user...

PT-2025-20786 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue is related to mounting a maliciously crafted AFP network share, which may lead to system termination...

PT-2025-20764 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iPadOS versions 17.7.7 and earlier macOS Ventura versions 13.7.6 and earlier macOS Sequoia versions 15.5 and earlier macOS Sonoma versions 14.7.6 and earlier Description: A logging issue was addressed with improved data redaction, which could...