CVE-2025-43328

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43328

A permissions issue in Apple macOS prior to Tahoe 26 allows an application to access sensitive user data . This vulnerability was addressed by implementing additional restrictions . To resolve this issue, it is recommended to update the operating system to macOS Tahoe 26 . While specific technica...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in tvOS 26.1, macOS Tahoe 26, watchOS 26.1, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43294

A vulnerability exists in the MallocStackLogging component, where an issue in handling environment variables allows an app to access sensitive user data . This flaw was addressed with improved validation. The issue is fixed in iOS 26.1 , iPadOS 26.1 , macOS Tahoe 26 , tvOS 26.1 , and watchOS 26.1...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

Apple's macOS Tahoe (version 26) is affected by a symbolic link mishandling vulnerability. The underlying cause involves improper handling of symlinks, which could allow an application to access protected user data . This issue was addressed in the release of macOS Tahoe 26 . No specific exploit ...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43312

A buffer overflow vulnerability exists in macOS (specifically versions prior to Sequoia 15.7 , Sonoma 14.8 , and Tahoe 26 ) due to insufficient bounds checking. An application could exploit this flaw to trigger an unexpected system termination . The issue has been addressed with improved bounds c...

CVE-2025-43312

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause unexpected system termination...

CVE-2025-43304

A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to gain root privileges...

CVE-2025-43305

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...

CVE-2025-43344

An out-of-bounds access issue exists in various Apple operating systems due to insufficient bounds checking. This vulnerability could allow an app to trigger an unexpected system termination . The issue is addressed in iOS 26 , iPadOS 26 , macOS Tahoe 26 , tvOS 26 , visionOS 26 , and watchOS 26 ....

CVE-2025-43190

A parsing issue in the handling of directory paths exists across several Apple operating systems, including iOS 26 , iPadOS 26 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , macOS Tahoe 26 , visionOS 26 , and watchOS 26 . The root cause is a lack of sufficient path validation, which could allow an ap...

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43368

A use-after-free issue exists in the web page rendering module of WebKit , affecting Safari browsers on iOS , iPadOS , and macOS Tahoe . The root cause is linked to improper memory management, where memory is used after it has been freed. Processing maliciously crafted web content can trigger thi...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service...

CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...

CVE-2025-43295

A denial-of-service vulnerability exists in several Apple products due to insufficient authentication and validation. A malicious application may exploit this flaw to cause a system crash or denial-of-service. This issue has been addressed in iOS 18.7 , iPadOS 18.7 , macOS Sequoia 15.7 , macOS So...

CVE-2025-43329

A permissions vulnerability in the Sandbox environment across multiple Apple products, including iOS , iPadOS , tvOS , watchOS , and macOS , could allow a malicious application to break out of its sandbox. The issue is caused by errors in the authentication process. This vulnerability has been ad...