CVE-2025-43261

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43261

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-31277

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43241

CVE-2025-43241 affects macOS: a permissions issue may allow an app to read files outside its sandbox. Fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. Impact: potential confidentiality risk (high). The issue is described as a permissions restriction problem; root cause ...

CVE-2025-43241

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to read files outside of its sandbox...

CVE-2025-43241

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to read files outside of its sandbox...

CVE-2025-43240

CVE-2025-43240 is linked to WebKitGTK/webkit2gtk in multiple distributions. The issue is a logic flaw where a download’s origin may be incorrectly associated. Public details in connected advisories show fixes implemented as WebKitGTK/WebKit2GTK updates (e.g., 2.48.5 series) across Debian (DSA-597...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated...

CVE-2025-43256

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to gain root privileges...

CVE-2025-43256

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to gain root privileges...

CVE-2025-43256

The CVE-2025-43256 issue affects macOS Sequoia and macOS Sonoma, tied to a state-management issue that could allow an app to gain root privileges via local access. Publicly documented fixes are macOS Sequoia 15.6 and macOS Sonoma 14.7.7. If exploiting details exist in the provided sources, they a...

CVE-2025-43251

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.6. A local attacker may gain access to Keychain items...

CVE-2025-43251

CVE-2025-43251 affects macOS Sequoia 15.6 (fixed in 15.6). The issue is an authorization flaw in state management that could let a local attacker access Keychain items (CONFIDENTIALITY impact) with LOW privileges and no user interaction. CVSS: LOCAL attack vector, LOW attack complexity, PRIVilege...

CVE-2025-43251

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.6. A local attacker may gain access to Keychain items...

CVE-2025-43267

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able to access sensitive user data...

CVE-2025-43267

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able to access sensitive user data...

CVE-2025-43267

CVE-2025-43267 describes an injection issue that was mitigated by improved input validation. The vulnerability affects macOS Sequoia prior to 15.6, with the fixed version being macOS Sequoia 15.6. The impact is that an app may be able to access sensitive user data. The available connected docs co...

CVE-2025-43246

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...