35144 matches found
CVE-2025-43330
CVE-2025-43330 affects macOS Sequoia (15.7) and macOS Tahoe (26) where an app could break out of its sandbox due to vulnerable code. Apple fixed the issue by removing the vulnerable code in Sequoia 15.7; Tahoe has related security updates. The public documentation notes sandbox escape risk and de...
CVE-2025-43326
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43326
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-43310
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to trick a user into copying sensitive data to the pasteboard...
CVE-2025-43310
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to trick a user into copying sensitive data to the pasteboard...
CVE-2025-43279
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data...
CVE-2025-43297
CVE-2025-43297 describes a type-confusion issue in macOS Tahoe (26) that is mitigated by improved memory handling. The vulnerability could allow an app to cause a denial of service, with exploitation described as local (requires no user interaction) and affecting the Availability impact. The fixe...
CVE-2025-43297
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service...
CVE-2025-43297
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service...
CVE-2025-43311
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43311
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43311
CVE-2025-43311 affects macOS Sequoia 15.7 and macOS Sonoma 14.8, where an app may access protected user data due to insufficient entitlement controls. The issue was addressed by adding entitlement checks. Remediation: apply macOS Sonoma 14.8 or macOS Sequoia 15.7 updates (as released). The CVE en...
CVE-2025-43346
CVE-2025-43346 is an out-of-bounds access vulnerability addressed by improved bounds checking. It affects Apple platforms as specified in the sources: tvOS 26, watchOS 26, iOS 26, iPadOS 26, visionOS 26, and iOS 18.7 / iPadOS 18.7. The underlying cause is insufficient boundary checking when proce...
CVE-2025-43307
Summary of CVE-2025-43307 (macOS Tahoe 26): The issue, described as an insufficient-authorization/validation problem, could allow an app to access sensitive user data. It is tied to macOS Tahoe 26 and is fixed in that release. The vulnerability is characterized by a local attack vector with low a...
CVE-2025-43307
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43307
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43327
The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malicious website may lead to address bar spoofing...