CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43401

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. A remote attacker may be able to cause a denial-of-service...

CVE-2025-43401

A denial-of-service (DoS) vulnerability exists in the WindowServer component of Apple macOS . The flaw stems from a lack of proper validation of user-supplied data , which can cause the system to enter an excessively long loop . A remote attacker can exploit this issue without authentication to t...

CVE-2025-43496

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...

CVE-2025-43496

A vulnerability in Mail allowed remote content to be loaded even when the 'Load Remote Images' setting was disabled. This issue was addressed by adding additional logic. The fix is included in iOS 18.7.2 , iPadOS 18.7.2 , iOS 26.1 , iPadOS 26.1 , macOS Sequoia 15.7.2 , macOS Tahoe 26.1 , visionOS...

CVE-2025-43382

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43414

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

CVE-2025-43414

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43394

This vulnerability affects Apple macOS systems, specifically macOS Sonoma 14.8.2 , macOS Sequoia 15.7.2 , and macOS Tahoe 26.1 . The root cause is improper handling of symbolic links , which could allow an application to access protected user data . The issue has been addressed in the aforementio...

CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory...

CVE-2025-43336

A permissions issue in Apple macOS allows an application with root privileges to potentially access private information . This vulnerability stems from incorrect authorization and is addressed by implementing additional restrictions. The flaw affects macOS Sonoma (prior to 14.8.2), macOS Sequoia ...

CVE-2025-43336

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app with root privileges may be able to access private information...

CVE-2025-43336

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information...

CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43377

An out-of-bounds read vulnerability was identified in the Model I/O framework. This issue was addressed by implementing improved bounds checking. If exploited, an app may be able to cause a denial-of-service (DoS). The vulnerability is fixed in iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , ...

CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43398

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to cause unexpected system termination...

CVE-2025-43399

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43399

A privacy issue in Siri allows an app to access protected user data due to insufficient redaction of sensitive information. This vulnerability affects several Apple platforms and has been addressed in the following versions: iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , and macOS Tahoe 26.1...