CVE-2025-43532

The CVE-2025-43532 issue is a memory corruption vulnerability addressed by Apple in multiple OS updates. Affected components: memory handling in several Apple platforms (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) with underlying bounds-check improvements. Fixed in iOS 18.7.3 / iPadOS 18.7.3, iOS...

EUVD-2025-203155

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. Processing malicious data may lead to unexpected app termination...

CVE-2025-43509

This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to access sensitive user data...

EUVD-2025-203159

This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

CVE-2025-43509

CVE-2025-43509 affects Apple macOS Sonoma (14.8.3), macOS Sequoia (15.7.3), and macOS Tahoe (26.2). The issue relates to insufficient data protection that could allow an app to access sensitive user data. Apple’s advisories and NVD entry state the vulnerability was addressed by the respective OS ...

CVE-2025-43509

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data...

CVE-2025-43381

CVE-2025-43381 concerns macOS Tahoe prior to 26.1, where symbolic link handling could enable a malicious app to delete protected user data. The issue is addressed in macOS Tahoe 26.1 as part of a fix for symlink mishandling. Impact description and remediation indicate that upgrading to Tahoe 26.1...

CVE-2025-43381

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data...

EUVD-2025-203172

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data...

CVE-2025-43381

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data...

EUVD-2025-203147

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to read sensitive location information...

CVE-2025-43513

CVE-2025-43513 is a permissions issue in macOS that allowed an app to read sensitive location information. It is fixed by removing the vulnerable code in macOS Tahoe 26.2, macOS Sequoia 15.7.3, and macOS Sonoma 14.8.3. The issue affects the MDM Configuration Tools component; the fixes are include...

CVE-2025-43513

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to read sensitive location information...

CVE-2025-43513

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to read sensitive location information...

CVE-2025-46285

CVE-2025-46285 describes an integer overflow that was mitigated by adopting 64-bit timestamps. The published fixes affect multiple Apple platforms: watchOS 26.2; macOS Sonoma 14.8.3; iOS 18.7.3 and iOS 26.2; iPadOS 18.7.3 and 26.2; macOS Tahoe 26.2; macOS Sequoia 15.7.3; visionOS 26.2; and tvOS 2...

CVE-2025-46285

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges...

CVE-2025-46285

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2, tvOS 26.2. An app may be able to gain root privileges...

CVE-2025-43506

A logic error was addressed with improved error handling. This issue is fixed in macOS Tahoe 26.1. iCloud Private Relay may not activate when more than one user is logged in at the same time...

CVE-2025-43506

A logic error was addressed with improved error handling. This issue is fixed in macOS Tahoe 26.1. iCloud Private Relay may not activate when more than one user is logged in at the same time...

CVE-2025-43402

CVE-2025-43402 affects macOS Tahoe prior to version 26.1, with a memory mishandling flaw that can cause an app to terminate the system or corrupt process memory. Apple notes the fix is in macOS Tahoe 26.1. Connected feeds (CNVD, RH, NVD, etc.) consistently describe memory handling improvements as...