CVE-2025-43248

A logic issue exists in Apple macOS Sequoia and Apple macOS Sonoma that could allow a malicious application to gain root privileges . The vulnerability has been addressed with improved restrictions. The issue is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7 . No specific exploit links or in...

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2025-43229

A vulnerability exists in the WebKit component used by Apple Safari and macOS Sequoia (versions prior to 15.6 and 18.6, respectively). The root cause is related to a logic issue in state management , where processing specially crafted web content can lead to universal cross-site scripting (XSS) ....

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-43189

Apple macOS Sequoia and macOS Sonoma are affected by a security vulnerability arising from memory mishandling . A malicious application could exploit this issue to read kernel memory . This vulnerability has been addressed with improved memory handling in macOS Sequoia 15.6 and macOS Sonoma 14.7....

CVE-2025-43222

A use-after-free vulnerability exists in the CFNetwork framework on iPadOS and macOS systems, where memory is accessed after being released. Exploitation of this flaw by a remote attacker may result in service interruptions or unexpected app termination . This issue has been addressed by removing...

CVE-2025-43222

A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An attacker may be able to cause unexpected app termination...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...

CVE-2025-31275

A permissions issue exists in macOS Sequoia (versions prior to 15.6 ) where a sandboxed process may be able to launch any installed application. This vulnerability was addressed with additional restrictions. The issue is fixed in macOS Sequoia 15.6 . Exploitation details and specific attack vecto...

CVE-2025-43243

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system...

CVE-2025-43243

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system...

CVE-2025-43193

The SecurityAgent component in macOS is vulnerable to uncontrolled resource consumption due to memory mishandling . A remote attacker can exploit this issue to trigger a service failure or cause a denial-of-service (DoS) . This vulnerability is addressed in macOS Sequoia 15.6 , macOS Sonoma 14.7....

CVE-2025-43193

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service...

CVE-2025-43239

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2025-43239

An out-of-bounds access issue exists in Apple macOS that can lead to unexpected application termination when processing a maliciously crafted file . This vulnerability was addressed by improving bounds checking. The issue is fixed in the following versions: macOS Sequoia 15.6 , macOS Sonoma 14.7....

CVE-2025-43239

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2025-43192

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. Account-driven User Enrollment may still be possible with Lockdown Mode turned on...