CVE-2025-43295

A denial-of-service vulnerability was identified in the libc component of Apple products. The root cause was a validation issue, which has been addressed with improved validation . Affected software includes iOS 18.7 , iPadOS 18.7 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26 . Ex...

CVE-2025-43329

A permissions issue in various Apple operating systems allows an application to break out of its sandbox . This vulnerability is rooted in authentication process errors that allow attackers to bypass sandbox security mechanisms. Affected products include iOS, iPadOS, tvOS, watchOS, and macOS . Th...

CVE-2025-43283

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43283

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43283

An out-of-bounds read vulnerability exists in Apple macOS Tahoe (versions prior to 26.0) due to an insufficient boundary check . An attacker could exploit this issue to cause an unintended system termination . The vulnerability has been addressed with improved bounds checking. Users areARM_ED REC...

CVE-2025-43333

A permissions issue in macOS Tahoe (versions prior to 26) allows a local attacker to exploit a lack of restrictions to gain root privileges . This vulnerability was addressed by implementing additional restrictions. Remediation is provided by updating to macOS Tahoe 26 . While a sighting of this ...

CVE-2025-43333

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to gain root privileges...

CVE-2025-43299

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...

CVE-2025-43299

A denial-of-service issue was identified in the libc component of Apple's operating systems. The root cause was a lack of proper validation, which could allow an app to cause a system crash or denial-of-service. This vulnerability was addressed with improved validation in the following versions: ...

CVE-2025-43325

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43325

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43325

An access issue in macOS Tahoe 26.x allows an application to bypass insufficient sandbox restrictions to access sensitive user data. This vulnerability has been addressed in macOS Tahoe 26 , with updates also provided for macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 to resolve related sandbox and...

CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...

CVE-2025-43292

A race condition was addressed with improved state handling. This issue is fixed in macOS Tahoe 26, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...

CVE-2025-43314

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43314

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43355

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause a denial-of-service...

CVE-2025-43355

A type confusion issue exists in several Apple operating systems due to improper memory handling. This vulnerability could allow an application to trigger a denial-of-service (DoS) . Affected platforms include iOS 18.7 , iPadOS 18.7 , iOS 26 , iPadOS 26 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , ...

CVE-2025-31271

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...

CVE-2025-31271

A state mismanagement vulnerability in Apple macOS Tahoe 26 allows an attacker to answer a FaceTime call while the device screen is locked. This issue can persist even if notifications are disabled on the lock screen. The vulnerability has been addressed through improved state management, and the...