CVE-2025-43380

An out-of-bounds write vulnerability exists in the sips component of Apple macOS. The flaw stems from insufficient input validation , which can be triggered when parsing a file, potentially leading to an unexpected app termination . This issue has been addressed in macOS Sonoma 14.8.2 , macOS Seq...

CVE-2025-43322

A logic issue in Apple macOS allows an application to potentially access sensitive user data . This vulnerability has been addressed with improved checks and is fixed in macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . Exploitation details regarding specific vectors or wild-spr...

CVE-2025-43322

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43288

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to bypass Privacy preferences...

CVE-2025-43288

A security vulnerability exists in macOS Sequoia prior to version 15.7 , specifically within the Archive Utility component. The issue stems from insufficient symbolic link validation , which could allow an application to bypass Privacy preferences . The vulnerability has been addressed with impro...

CVE-2025-43334

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43420

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43420

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43420

A race condition exists in Apple macOS due to improper state handling, which could allow an application to access sensitive user data . This vulnerability affects versions prior to macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . The issue is addressed in these specific updated...

CVE-2025-43477

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43499

A permissions issue in Shortcuts was addressed with additional entitlement checks to prevent an app from accessing sensitive user data . This vulnerability affects iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . The issue is resolved in these speci...

CVE-2025-43499

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43499

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43335

This vulnerability affects macOS Sonoma 14.8.2 , macOS Sequoia 15.7.2 , and macOS Tahoe 26.1 . The root cause is related to improper access control , where an app may be able to access user-sensitive data . The issue was addressed by Apple through the addition of additional logic and improved val...

CVE-2025-43397

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause a denial-of-service...

CVE-2025-43397

A permissions issue (incorrect authorization) exists in Apple macOS that could allow an application to cause a denial-of-service (DoS). The vulnerability was addressed by removing the affected code. This issue is fixed in macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . No spec...

CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43378

A permissions issue in Apple macOS Sequoia allows an application to access sensitive user data due to insufficient privilege restrictions. The vulnerability has been addressed in macOS Sequoia 15.7.2 and macOS Tahoe 26.1 through the implementation of additional restrictions. While specific exploi...

CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43401

A denial-of-service (DoS) vulnerability exists in the WindowServer component of Apple macOS . The flaw stems from a lack of proper validation of user-supplied data , which can cause the system to enter an excessively long loop . A remote attacker can exploit this issue without authentication to t...