CVE-2025-43328

A permissions issue in macOS versions prior to Tahoe 26 allows an application to access sensitive user data . This vulnerability was addressed by implementing additional restrictions. Remediation involves updating to macOS Tahoe 26 . No specific exploit details or local/remote attack vectors are ...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in tvOS 26.1, macOS Tahoe 26, watchOS 26.1, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43369

A symbolic link mishandling vulnerability exists in Apple macOS versions prior to Tahoe 26 . The root cause is related to improper symlink handling, which could allow an application to access protected user data . This issue has been addressed in macOS Tahoe 26 with improved symlink handling. No ...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43312

A buffer overflow vulnerability exists in Apple macOS due to insufficient boundary checking. This flaw could allow an application to cause unexpected system termination . Affected versions include macOS Sequoia prior to 15.7, macOS Sonoma prior to 14.8, and macOS Tahoe prior to 26. The issue has ...

CVE-2025-43312

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43304

A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to gain root privileges...

CVE-2025-43305

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...

CVE-2025-43344

An out-of-bounds access issue exists in multiple Apple operating systems, including iOS 26 , iPadOS 26 , macOS Tahoe 26 , tvOS 26 , visionOS 26 , and watchOS 26 . The underlying cause is insufficient bounds checking, which could allow a malicious application to trigger an unexpected system termin...

CVE-2025-43190

A parsing issue in the handling of directory paths allows an app to potentially access sensitive user data . This vulnerability is present in several Apple products, including iOS (prior to 26), iPadOS (prior to 26), macOS Sequoia (prior to 15.7), macOS Sonoma (prior to 14.8), macOS Tahoe (prior ...

CVE-2025-43368

A use-after-free vulnerability exists in the WebKit web rendering engine, specifically impacting Safari on iOS , iPadOS , and macOS Tahoe , as well as webkitgtk (including webkitgtk4 ) on Astra Linux , AlmaLinux , and Amazon Linux 2 . The flaw occurs due to improper memory management, which can b...

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...

CVE-2025-43295

A denial-of-service vulnerability was identified in the libc component of Apple products. The root cause was a validation issue, which has been addressed with improved validation . Affected software includes iOS 18.7 , iPadOS 18.7 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . Ex...

CVE-2025-43329

A permissions issue in various Apple operating systems allows an application to break out of its sandbox . This vulnerability is rooted in authentication process errors that allow attackers to bypass sandbox security mechanisms. Affected products include iOS, iPadOS, tvOS, watchOS, and macOS . Th...

CVE-2025-43283

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...