CVE-2025-43289

Summary : CVE-2025-43289 involves a logic issue in macOS that was mitigated by improved input validation. Affected products/versions : macOS Sonoma 14.8; fixes are included in macOS Sequoia 15.7 and macOS Tahoe 26. Vulnerability details : A malicious app could access sensitive user data due to th...

EUVD-2026-15111

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox...

CVE-2026-28835

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination...

CVE-2026-20602

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to cause a denial-of-service...

PT-2026-7798

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions 26.3 macOS Sonoma versions 14.8.4 macOS Sequoia version 15.7.4 watchOS versions 26.3 tvOS versions 26.3 iOS versions 18.7.5 and 26.3 iPadOS versions 18.7.5 and 26.3 visionOS version 26.3 Description Processing a maliciousl...

PT-2025-51001

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.3 macOS versions prior to Sequoia 15.7.3 Description An application may be able to cause a denial-of-service due to insufficient input validation. Recommendations Update to macOS Sonoma version 14.8.3 or...

EUVD-2025-198517

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window...

CVE-2025-43394

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

EUVD-2025-26255

Malicious code in bioql PyPI...

CVE-2025-43330

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to break out of its sandbox...

CVE-2025-43305

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...

CVE-2025-43241

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to read files outside of its sandbox...

CVE-2025-24155

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. An app may be able to disclose kernel memory...

CVE-2025-30467

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. Visiting a malicious website may lead to address bar spoofing...

CVE-2025-30467

CVE-2025-30467 affects Apple Safari (and related Apple platforms) with an address bar spoofing vulnerability. The available documents indicate the issue occurs when visiting a malicious website that can spoof the address bar, potentially confusing users about the site they are on. Apple’s patches...

CVE-2025-24174

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to bypass Privacy preferences...

CVE-2024-44189

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent...

CVE-2024-44167

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to overwrite arbitrary files...