CVE-2025-24134

CVE-2025-24134 impacts macOS Sequoia 15.3 and concerns an information-disclosure in FaceTime. The entry notes an app may access user-sensitive data and that Apple fixed the issue in Sequoia 15.3 by strengthening privacy controls. The vulnerability is characterized with LOCAL attack vector, low at...

CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24135

This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges...

CVE-2025-24135

This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges...

CVE-2025-24135

CVE-2025-24135 affects macOS prior to Sequoia 15.3 and is associated with the System Extensions component. The issue arises from insufficient message validation, enabling an app to potentially gain elevated privileges on a local basis. Apple’s Sequoia 15.3 security content lists CVE-2025-24135 un...

CVE-2025-24174

CVE-2025-24174 affects macOS components and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue is described as an access control/privacy bypass that could allow an app to bypass Privacy preferences, with the underlying root cause described as improved checks ...

CVE-2025-24174

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences...

CVE-2024-54530

CVE-2024-54530 affects Apple devices with iOS 18.2 and iPadOS 18.2 (and corresponding macOS/watchOS/visionOS updates) where the password autofill feature may fill in passwords after a failed authentication. The issue is addressed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iP...

CVE-2024-54530

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication...

CVE-2025-24158

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing web content may lead to a denial-of-service...

CVE-2024-54475

CVE-2024-54475 is a macOS privacy vulnerability where an app may determine the user’s current location via log data. Apple fixes: macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. Remediation: update to the affected versions. This entry is supported by Apple advisory and various secu...

CVE-2025-24139

CVE-2025-24139 affects macOS Ventura (and related macOS releases) where parsing a maliciously crafted file may cause an unexpected app termination. The initial description notes the issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3, indicating the root cause is l...

CVE-2025-24139

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Ventura 13.7.5. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2024-54547

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data...

CVE-2025-24103

Technical details (affected product, component, root cause, impact or remediation) for CVE-2025-24103 are not provided in the connected documents; monitor for updates.

CVE-2025-24103

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data...

CVE-2025-24115

The CVE-2025-24115 issue is a path-handling vulnerability in macOS that arises from insufficient validation, enabling an app to read files outside its sandbox. Affected platforms are macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15.3. The root cause is a path handling issue address...

CVE-2025-24108

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24108

CVE-2025-24108 affects macOS Sequoia 15.3 where an access issue could allow an app to access protected user data. The NVD description notes the issue was addressed with additional sandbox restrictions and that the fix is included in macOS Sequoia 15.3. Apple’s security content for Sequoia 15.3 co...