CVE-2025-43538

A logging issue was addressed with improved data redaction. This issue is fixed in watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. An app may be able to access sensitive user data...

CVE-2025-43538

CVE-2025-43538 is a “logging issue” in Apple platforms that could allow an app to access sensitive user data. The connected sources specify concrete fixes across multiple Apple OSes: watchOS 26.2; macOS Sonoma 14.8.3; iOS 18.7.3 and iOS 26.2; iPadOS 18.7.3 and 26.2; macOS Tahoe 26.2; and visionOS...

EUVD-2025-203125

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sonoma 14.8.3. An app may be able to access sensitive user data...

CVE-2025-43523

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

EUVD-2025-203137

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

CVE-2025-43466

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

EUVD-2025-203161

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43466

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43519

This CVE (CVE-2025-43519) concerns a permissions issue in macOS that could allow an app to access sensitive user data. Concrete details in connected docs show fixes are included in macOS Tahoe 26.2, macOS Sequoia 15.7.3, and macOS Sonoma 14.8.3. The issue is addressed by these OS updates; no expl...

EUVD-2025-203130

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

CVE-2025-43509

CVE-2025-43509 affects Apple macOS Sonoma (14.8.3), macOS Sequoia (15.7.3), and macOS Tahoe (26.2). The issue relates to insufficient data protection that could allow an app to access sensitive user data. Apple’s advisories and NVD entry state the vulnerability was addressed by the respective OS ...

CVE-2025-43509

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data...

CVE-2025-46276

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data...

CVE-2025-46276

CVE-2025-46276 is an information-disclosure issue addressed by updates across Apple platforms: watchOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2, iOS 18.7.3/iPadOS 18.7.3, and iOS 26.2/iPadOS 26.2. The connected advisories confirm a vulnerability could allow...

CVE-2025-43465

CVE-2025-43465 affects macOS Tahoe prior to 26.1, where a directory-path parsing flaw could allow an app to access sensitive user data. The issue was fixed in macOS Tahoe 26.1 via improved path validation. Remediation: update to macOS 26.1.

CVE-2025-43388

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43521

CVE-2025-43521 describes a downgrade issue affecting Intel-based Macs that was mitigated by adding code-signing restrictions. The issue could allow an app to access sensitive user data, and the vulnerability is fixed in macOS Tahoe 26.2 and macOS Sequoia 15.7.3. Public references in the connected...

CVE-2025-43521

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

CVE-2025-14159

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ayssccpresultsexportfile' AJAX action. This makes it possible for unauthenticated...

CVE-2025-14442 Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...