CVE-2025-43246

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...

CVE-2025-43246

CVE-2025-43246 affects macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The issue, addressed with improved checks, could allow an app to access sensitive user data (confidentiality impact high) via a local attack requiring user interaction. Root causes and specific vulnerable components are not detail...

CVE-2025-43273

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.8. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2025-43273

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14.8. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2025-43273

CVE-2025-43273 affects macOS Sonoma components (CoreMedia, others) where a permission issue could allow a sandboxed process to bypass sandbox restrictions. The issue is fixed in macOS Sonoma 14.8; apply the Sonoma 14.8 update to remediate. The CVSS data provided indicates a high-impact, privilege...

CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43225

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...

CVE-2025-43248

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges...

CVE-2025-43248

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges...

CVE-2025-43248

CVE-2025-43248 is a local privilege-escalation vulnerability in macOS Sequoia (15.6) and macOS Sonoma (14.7.7). The issue is described as a logic error that was addressed by improved restrictions, with the fixed versions specifically listed as macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The CVSS ...

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2025-43229

CVE-2025-43229 affects Apple macOS Sequoia (15.6) and Safari (18.6); the issue, tied to WebKit, enables universal cross-site scripting when processing malicious web content due to a state-management flaw. The NVD entry lists a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User inte...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-43189

CVE-2025-43189 affects Apple macOS Sequoia and macOS Sonoma. The issue stems from memory mishandling that could allow a malicious application to read kernel memory. It is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The vulnerability is documented with high-severity impact (confidentialit...

CVE-2025-43222

This CVE (CVE-2025-43222) concerns a use-after-free vulnerability fixed by removing the vulnerable code. Affected products and versions include macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. Impact is that an attacker could cause an unexpected application termin...

CVE-2025-43222

A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An attacker may be able to cause unexpected app termination...

CVE-2025-31275

CVE-2025-31275 affects macOS Sequoia, with a permissions issue that could allow a sandboxed process to launch any installed app. The vulnerability is fixed in macOS Sequoia 15.6. Remediation: upgrade to Sequoia 15.6 (and apply Apple’s security updates). The CVE entry is corroborated by NVD/NIST a...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...