CVE-2025-43196

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges...

CVE-2025-43196

CVE-2025-43196 describes a path handling issue that could allow an app to gain root privileges. The issue is resolved by macOS updates: Sequoia 15.6, Sonoma 14.7.7, and Ventura 13.7.7. The CVSS 3.1 metrics indicate a LOCAL attack vector, LOW attack complexity and LOW privileges required, with HIG...

CVE-2025-43233

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-43218

CVE-2025-43218 describes an out-of-bounds read in macOS Sequoia caused by insufficient input validation while processing malicious USD files. The vulnerability can disclose memory contents and is fixed in macOS Sequoia 15.6. Affected software is macOS Sequoia before the 15.6 update; the descripti...

CVE-2025-43218

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2025-43218

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2025-24188

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24188

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24188

CVE-2025-24188 is a logic-issue vulnerability addressed by Apple in Safari 18.6 and macOS Sequoia 15.6. The description states that Processing maliciously crafted web content may lead to an unexpected Safari crash, with a fix implemented via improved checks. Affected components include Safari (an...

CVE-2025-43276

A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one user is logged in at the same time...

CVE-2025-43276

A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one user is logged in at the same time...

CVE-2025-43276

Technical details about CVE-2025-43276 (affected product, root cause, impact, or fix specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and CVE records for concrete technical information.

CVE-2025-43260

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to hijack entitlements granted to other privileged apps...

CVE-2025-43260

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to hijack entitlements granted to other privileged apps...

CVE-2025-43260

CVE-2025-43260 affects Apple macOS Sequoia (15.6) and macOS Sonoma (14.7.7). The issue could allow an app to hijack entitlements granted to other privileged apps, representing a local-attack surface with low confidentiality/ integrity impact per the provided metrics. The vulnerability is mitigate...

CVE-2025-43247

CVE-2025-43247 describes a permissions issue in macOS. A malicious app with root privileges could modify system files. Affected: macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Impact per provided entry: confidentiality = Low, integrity = High, availability = None. Base score 5.5 (...

CVE-2025-43247

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app with root privileges may be able to modify the contents of system files...

CVE-2025-43227

CVE-2025-43227 affects WebKit/WebKitGTK in Apple Safari/WebKitGTK-based products where processing maliciously crafted web content could disclose sensitive user information. The vulnerability is mitigated by software updates: Safari 18.6; iOS 18.6 and iPadOS 18.6; macOS Sequoia 15.6; tvOS 18.6; wa...

CVE-2025-43266

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

CVE-2025-43211

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing web content may lead to a denial-of-service...