CVE-2025-43373

A memory handling vulnerability in macOS allows an application to cause unexpected system termination or corrupt kernel memory . The issue is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-787 (Out-of-bounds Write). Specifically, document...

CVE-2025-43373

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-43390

A downgrade issue affects Intel-based Mac computers due to insufficient code signature restrictions. An attacker could exploit this vulnerability to gain unauthorized access to sensitive user data . The flaw has been addressed by Apple through additional code-signing restrictions. Remediation is ...

CVE-2025-43390

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43387

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. A malicious app may be able to gain root privileges...

CVE-2025-43387

Apple macOS Sequoia is affected by a permissions issue that could allow a malicious app to gain root privileges . The vulnerability is categorized under CWE-863 (Incorrect Authorization) . Remediation is available in macOS Sequoia 15.7.2 and macOS Tahoe 26.1 . No specific exploit details or links...

CVE-2025-43387

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. A malicious app may be able to gain root privileges...

CVE-2025-43411

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...

CVE-2025-43446

A security vulnerability exists in macOS Sonoma (prior to 14.8.2), Sequoia (prior to 15.7.2), and Tahoe (prior to 26.1) due to insufficient symbolic link validation . This flaw could allow an application to modify protected parts of the file system . The issue is resolved in versions macOS Sequoi...

CVE-2025-43446

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to modify protected parts of the file system...

CVE-2025-43407

This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox...

CVE-2025-43348

A logic issue in Apple macOS allows an application to bypass Gatekeeper checks due to insufficient authentication and validation. This vulnerability affects macOS Sonoma prior to 14.8.2, macOS Sequoia prior to 15.7.2, and macOS Tahoe prior to 26.1. The issue has been addressed with improved valid...

CVE-2025-43348

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may bypass Gatekeeper checks...

CVE-2025-43364

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to break out of its sandbox...

CVE-2025-43364

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43396

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. A sandboxed app may be able to access sensitive user data...

CVE-2025-43396

A logic issue exists in Apple macOS (Sonoma prior to 14.8.2, Sequoia prior to 15.7.2) due to insufficient checks. This vulnerability could allow a sandboxed application to gain unauthorized access to sensitive user data . The issue has been addressed with improved checks and is fixed in macOS Seq...

CVE-2025-43396

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A sandboxed app may be able to access sensitive user data...

CVE-2025-43379

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data...

CVE-2025-43338

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26, macOS Sonoma 14.8.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...