40296 matches found
CVE-2025-43283
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...
CVE-2025-43283
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination...
CVE-2025-43283
A vulnerability exists in Apple macOS (specifically within the AppleIntelKBLGraphics kext ) that allows for an out-of-bounds read . The root cause is a lack of proper validation of user-supplied data, which can lead to a read past the end of an allocated buffer. An attacker with low-privileged co...
CVE-2025-43333
A permissions vulnerability exists in the Spotlight component of Apple macOS Tahoe . This flaw allows an application to bypass existing restrictions and potentially gain root privileges . The issue has been addressed with additional restrictions in macOS Tahoe 26 . While the vulnerability is crit...
CVE-2025-43333
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to gain root privileges...
CVE-2025-43299
A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service...
CVE-2025-43299
A denial-of-service issue was identified in Apple products due to improper input validation. The vulnerability could allow an application to cause a system crash or service interruption. The issue is addressed in iOS 18.7 , iPadOS 18.7 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , and macOS Tahoe 26...
CVE-2025-43325
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43325
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43325
An access issue in macOS Tahoe 26.x allows an application to bypass insufficient sandbox restrictions to access sensitive user data. This vulnerability has been addressed in macOS Tahoe 26 , with updates also provided for macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 to resolve related sandbox and...
CVE-2025-43372
The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...
CVE-2025-43292
A race condition was addressed with improved state handling. This issue is fixed in macOS Tahoe 26, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...
CVE-2025-43314
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43314
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43355
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause a denial-of-service...
CVE-2025-43355
A type confusion vulnerability exists in the MobileStorageMounter component across several Apple operating systems, including iOS, iPadOS, tvOS, watchOS, visionOS, and macOS . This issue stems from improper memory handling and can be exploited by an application to cause a denial-of-service (DoS)....
CVE-2025-31271
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...
CVE-2025-31271
A state mismanagement vulnerability in macOS Tahoe (version 26) allows incoming FaceTime calls to appear or be accepted on a locked device, even when notifications are disabled on the lock screen. This issue was addressed through improved state management. The fix is available in macOS Tahoe 26 ....