5196 matches found
CVE-2024-54568
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...
CVE-2025-43255
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination...
CVE-2024-54568
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...
CVE-2024-44271
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...
CVE-2024-44271
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...
CVE-2024-54554
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...
CVE-2024-54554
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...
CVE-2024-54554
The CVE-2024-54554 issue in macOS Sequoia relates to improper handling of symbolic links that could allow an app to access sensitive user data. The vulnerability is addressed in macOS Sequoia 15.1, with the Apple security content listing this CVE under multiple affected components (including area...
CVE-2025-43187
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. Running an hdiutil command may unexpectedly execute arbitrary code...
CVE-2025-43187
Summary (CVE-2025-43187) This macOS-specific vulnerability arises from the hdiutil path where running the command may unexpectedly execute arbitrary code. The issue was mitigated by removing the vulnerable code and is fixed in macOS updates: Sonoma 14.7.7, Ventura 13.7.7, and Sequoia 15.6. The NV...
CVE-2025-43187
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code...
CVE-2025-43284
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination...
CVE-2025-43284
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to cause unexpected system termination...
CVE-2024-54568
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...
CVE-2024-54568
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...
CVE-2025-43284
CVE-2025-43284 affects macOS where an out-of-bounds read was addressed by improved bounds checking. The issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.6. An app may be able to cause unexpected system termination. Attack vector is LOCAL with LOW privilegesRequire...
CVE-2024-44271
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...
CVE-2024-44271
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...
CVE-2024-44271
Apple macOS Sequoia 15.2 fixes CVE-2024-44271, where an app could record the screen without an indicator. Update to macOS Sequoia 15.2 to remediate; the issue was addressed via improved checks in the system. No exploitation details are provided beyond the CVE entry.