CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access sensitive user data...

CVE-2025-43328

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43328

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43328

A permissions issue in Apple macOS prior to Tahoe 26 allows an application to access sensitive user data . This vulnerability was addressed by implementing additional restrictions . To resolve this issue, it is recommended to update the operating system to macOS Tahoe 26 . While specific technica...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in tvOS 26.1, macOS Tahoe 26, watchOS 26.1, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43294

An issue in the handling of environment variables within the MallocStackLogging component allows an app to access sensitive user data . This vulnerability is addressed with improved validation. The issue is fixed in iOS 26.1 , iPadOS 26.1 , macOS Tahoe 26 , tvOS 26.1 , and watchOS 26.1 . No speci...

CVE-2025-43369

A symbolic link mishandling vulnerability exists in Apple macOS versions prior to Tahoe 26 . The root cause is related to improper symlink handling, which could allow an application to access protected user data . This issue has been addressed in macOS Tahoe 26 with improved symlink handling. No ...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43312

A buffer overflow vulnerability exists in Apple macOS due to insufficient boundary checking. This flaw could allow an application to cause unexpected system termination . Affected versions include macOS Sequoia prior to 15.7, macOS Sonoma prior to 14.8, and macOS Tahoe prior to 26. The issue has ...

CVE-2025-43312

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43304

A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to gain root privileges...

CVE-2025-43305

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...

CVE-2025-43344

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination...

CVE-2025-43190

A parsing issue in the handling of directory paths allows an app to potentially access sensitive user data . This vulnerability is present in several Apple products, including iOS (prior to 26), iPadOS (prior to 26), macOS Sequoia (prior to 15.7), macOS Sonoma (prior to 14.8), macOS Tahoe (prior ...

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...