CVE-2025-43395

CVE-2025-43395 involves macOS where the issue was addressed by improved handling of symbolic links. The vulnerability could allow an app to access protected user data. Affected macOS versions include Sonoma 14.8.2, Sequoia 15.7.2, and Tahoe 26.1. The root cause, as described in the sources, is th...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43481

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43481

The CVE-2025-43481 entry affects macOS Sequoia (15.7.2) and macOS Tahoe (26.1). It describes a sandbox-bypass vulnerability in which an app may escape sandbox protections; Apple’s security notes indicate the issue was addressed with improved checks, with the fix shipped in Sequoia 15.7.2 and Taho...

CVE-2025-43481

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43478

The CVE-2025-43478 entry describes a use-after-free vulnerability due to memory mismanagement in macOS components. Affects macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. According to sources, exploitation could allow an app to cause an unexpected system termination (local attack...

CVE-2025-43478

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination...

CVE-2025-43478

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination...

CVE-2025-43408

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2025-43408

This CVE affects macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. Root cause: an under‑restricted lock device option allowed a physically present attacker to access contacts from the lock screen. The issue is fixed in the listed updates. Remediation: upgrade to macOS Sonoma 14.8.2...

CVE-2025-43408

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2025-43469

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43469

CVE-2025-43469 is a permissions issue in macOS that could allow an app to access sensitive user data. Connected sources confirm the root cause as a permissions validation/ restriction problem and specify affected platforms and fixed versions: macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS T...

CVE-2025-43469

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access sensitive user data...

CVE-2025-43412

CVE-2025-43412 describes a file quarantine bypass in macOS that could let a sandboxed app escape sandbox restrictions. Public details in the initial and connected documents identify the affected OS versions as macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1, with the root cause st...

CVE-2025-43412

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to break out of its sandbox...

CVE-2025-43412

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox...

CVE-2025-43445

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may...

CVE-2025-43405

Summary: CVE-2025-43405 is a permissions issue in macOS that is mitigated by sandbox restrictions. It affects macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1, where an app may access user-sensitive data due to the underlying sandbox permission problem. What is affected: macOS Sono...

CVE-2025-43405

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...