CVE-2025-43446

A security vulnerability exists in macOS Sonoma (prior to 14.8.2), Sequoia (prior to 15.7.2), and Tahoe (prior to 26.1) due to insufficient symbolic link validation . This flaw could allow an application to modify protected parts of the file system . The issue is resolved in versions macOS Sequoi...

CVE-2025-43446

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to modify protected parts of the file system...

CVE-2025-43407

This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox...

CVE-2025-43348

A logic issue in Apple macOS allows an application to bypass Gatekeeper checks due to insufficient authentication and validation. This vulnerability affects macOS Sonoma prior to 14.8.2, macOS Sequoia prior to 15.7.2, and macOS Tahoe prior to 26.1. The issue has been addressed with improved valid...

CVE-2025-43348

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may bypass Gatekeeper checks...

CVE-2025-43364

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to break out of its sandbox...

CVE-2025-43364

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43396

A logic issue exists in Apple macOS (Sonoma prior to 14.8.2, Sequoia prior to 15.7.2) due to insufficient checks. This vulnerability could allow a sandboxed application to gain unauthorized access to sensitive user data . The issue has been addressed with improved checks and is fixed in macOS Seq...

CVE-2025-43396

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. A sandboxed app may be able to access sensitive user data...

CVE-2025-43396

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A sandboxed app may be able to access sensitive user data...

CVE-2025-43380

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. Parsing a file may lead to an unexpected app termination...

CVE-2025-43380

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. Parsing a file may lead to an unexpected app termination...

CVE-2025-43380

An out-of-bounds write vulnerability exists in the sips component of Apple macOS. The flaw stems from insufficient input validation , which can be triggered when parsing a file, potentially leading to an unexpected app termination . This issue has been addressed in macOS Sonoma 14.8.2 , macOS Seq...

CVE-2025-43322

A logic issue in Apple macOS allows an application to potentially access sensitive user data . This vulnerability has been addressed with improved checks and is fixed in macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . Exploitation details regarding specific vectors or wild-spr...

CVE-2025-43288

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to bypass Privacy preferences...

CVE-2025-43288

A security vulnerability exists in macOS Sequoia prior to version 15.7 , specifically within the Archive Utility component. The issue stems from insufficient symbolic link validation , which could allow an application to bypass Privacy preferences . The vulnerability has been addressed with impro...

CVE-2025-43322

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43334

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43420

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43420

A race condition exists in Apple macOS due to improper state handling, which could allow an application to access sensitive user data . This vulnerability affects versions prior to macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . The issue is addressed in these specific updated...