CVE-2025-43216

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43216

CVE-2025-43216 is a use-after-free in WebKitGTK/WebKit processing of malicious web content that can cause an unexpected Safari crash. The CVE is referenced in multiple advisories tied to WebKitGTK/WebKit, with fixes implemented in Safari 18.6 and corresponding WebKitGTK updates (e.g., WebKitGTK/W...

CVE-2025-43186

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Parsing a file may lead to an unexpected app termination...

CVE-2025-43230

The issue was addressed with additional permissions checks. This issue is fixed in iPadOS 17.7.9, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. An app may be able to access user-sensitive data...

CVE-2025-43230

The issue was addressed with additional permissions checks. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to access user-sensitive data...

CVE-2025-43226

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2025-43226

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2025-24224

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to cause unexpected system termination...

CVE-2025-24224

CVE-2025-24224 is a remote-Trigger risk in Apple OS lineages. Affected: tvOS 18.5; iOS 18.5 and iPadOS 18.5; iPadOS 17.7.9; macOS Sequoia 15.5; watchOS 11.5; visionOS 2.5; macOS Ventura 13.7.7. Description: an issue addressed with improved checks that could allow a remote attacker to cause an une...

CVE-2025-24224

The issue was addressed with improved checks. This issue is fixed in tvOS 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, watchOS 11.5, visionOS 2.5, macOS Ventura 13.7.7. A remote attacker may be able to cause unexpected system termination...

CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2025-43211

CVE-2025-43211 is corroborated across multiple advisories (Debian DSA-5978-1, DEBIAN:DSA-5978-1, Fedora package advisories, AlmaLinux ALSA notes) as a WebKitGTK/webkit2gtk vulnerability where processing web content may lead to a denial-of-service. Connected documents identify the affected compone...

CVE-2025-43211

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing web content may lead to a denial-of-service...

CVE-2025-43224

CVE-2025-43224 is an out-of-bounds access issue addressed by improved bounds checking. It affects visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6, and iPadOS 18.6. Processing a malicious media file may terminate an app or corrupt memory. Remediation: upgrade to the fixed OS versions listed....

CVE-2025-43209

CVE-2025-43209 is an out-of-bounds access issue in Apple software that is addressed by updates to multiple OSes. Affected and fixed components (as per the CVE entry) include Safari/web content processing and various Apple platforms: macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7, i...

CVE-2025-43234

CVE-2025-43234 involves multiple memory corruption issues fixed by improved input validation in Apple platforms. The NVD entry states vulnerable components are tied to texture handling, with successful exploitation potentially causing an app to terminate unexpectedly. Affected products and fixed ...

CVE-2025-43214

CVE-2025-43214 affects WebKit/GPU-based web content handling used by Safari/WebKitGTK; the issue is a memory handling/processing weakness that may cause an unexpected crash when processing malicious web content. The CVE is listed with CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no...

CVE-2025-43214

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2025-43277

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption...