CVE-2025-43336

A permissions issue in Apple macOS allows an application with root privileges to potentially access private information . This vulnerability stems from incorrect authorization and is addressed by implementing additional restrictions. The flaw affects macOS Sonoma (prior to 14.8.2), macOS Sequoia ...

CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43377

An out-of-bounds read vulnerability was identified in the Model I/O framework. This issue was addressed by implementing improved bounds checking. If exploited, an app may be able to cause a denial-of-service (DoS). The vulnerability is fixed in iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , ...

CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43398

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination...

CVE-2025-43398

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to cause unexpected system termination...

CVE-2025-43399

A privacy issue in Siri allows an app to access protected user data due to insufficient redaction of sensitive information. This vulnerability affects several Apple platforms and has been addressed in the following versions: iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , and macOS Tahoe 26.1...

CVE-2025-43399

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43423

A logging issue in the Audio component of Apple products allows an attacker with physical access to an unlocked device paired with a Mac to view sensitive user information within system logs. This vulnerability is caused by insufficient data redaction and has been addressed in iOS 18.7.2 , iPadOS...

CVE-2025-43474

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2025-43474

An out-of-bounds read vulnerability exists in macOS due to insufficient input validation . An application could exploit this flaw to cause unexpected system termination or read kernel memory . This issue is addressed in macOS Sequoia 15.7.2 , macOS Sonoma 14.8.2 , and macOS Tahoe 26.1 . Remediati...

CVE-2025-43474

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43395

This vulnerability exists in macOS Sonoma (prior to 14.8.2), macOS Sequoia (prior to 15.7.2), and macOS Tahoe (prior to 26.1) due to improper handling of symbolic links . This flaw allows an application to potentially access protected user data . The issue was addressed by improving symlink handl...

CVE-2025-43481

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43481

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43408

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2025-43408

A security vulnerability exists in Apple macOS (specifically Sonoma prior to 14.8.2, Sequoia prior to 15.7.2, and Tahoe prior to 26.1) due to an under-restricted option on locked devices. An attacker with physical access to the hardware may be able to access the user's contacts directly from the ...

CVE-2025-43469

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...