CVE-2025-24167

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated...

CVE-2025-24097

A permissions issue in the AirDrop wireless data transmission component on iOS , iPadOS , tvOS , and macOS allows an application to read arbitrary file metadata . This vulnerability was addressed by implementing additional restrictions. Remediation is available in iOS 18.4 , iPadOS 18.4 , iPadOS ...

CVE-2025-30467

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. Visiting a malicious website may lead to address bar spoofing...

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24198

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with physical access may be able to use Siri to access sensitive user data...

CVE-2025-24264

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24266

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination...

CVE-2025-30463

Apple addressed a vulnerability where an application could potentially access sensitive user data due to insufficient restrictions on data container access . This issue is fixed in iOS 18.4 , iPadOS 18.4 , and macOS Sequoia 15.4 . Exploitation details are not provided in the documents, but report...

CVE-2025-30463

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data...

CVE-2025-24210

A logic error in the ImageIO component of various Apple operating systems allows for the disclosure of user information when parsing an image. This vulnerability has been addressed with improved error handling in iOS 18.4 , iPadOS 18.4 , iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , ...

CVE-2025-24283

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data...

PT-2025-18132 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 and 18.4 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 watchOS versions prior to 11.4 visionOS versions prior to 2.4 Description: The...

PT-2025-20748 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.6 macOS versions prior to 14.7.6 macOS versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to gain root privileges. Recommendations: For...

PT-2025-13889 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 macOS versions prior to 14.7.5 Description: A type confusion issue was addressed with improved memory handling. An attacker with user privileges may be able to read kernel memory. Recommendations: For macOS versio...

PT-2025-23209 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: An authentication issue was addressed with improved state management, which could allow an attacker with physical access to a locked devic...

PT-2025-13905

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Safari versions prior to 18.4 Description The issue was...

PT-2025-13902

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 18.4 Safari versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description A type confusion issue could lead to memory...

PT-2025-13938

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description The issue allows an app to retrieve Safari bookmarks without an entitlement check. This was addressed with additional entitlement checks...

PT-2025-13962 · Apple · Macos Sequoia +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue allows an app to potentially...