5196 matches found
CVE-2025-43194
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system...
CVE-2025-43252
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive user data when resolving symlinks...
CVE-2025-43252
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive user data when resolving symlinks...
CVE-2025-43252
CVE-2025-43252 affects macOS Sequoia; the issue stems from resolving symlinks that could disclose sensitive user data. It was addressed by adding an additional user-consent prompt and is fixed in macOS Sequoia 15.6. The CVSS metrics in the initial document indicate a MEDIUM base severity with con...
CVE-2025-43244
The CVE-2025-43244 entry documents a race condition resolved by improved state handling. Affected software includes macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, with the issue allowing an app to cause an unexpected system termination. The vulnerability is characterized by hi...
CVE-2025-43244
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination...
CVE-2025-43259
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2025-43259
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2025-43275
CVE-2025-43275 is a race-condition vulnerability in macOS components where insufficient validation allowed an app to break out of its sandbox. The issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. Affected products are macOS releases prior to these updates. The ...
CVE-2025-43275
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...
CVE-2025-43185
CVE-2025-43185 relates to a downgrade issue in macOS Sequoia that could allow an app to access protected user data. The fixed version is macOS Sequoia 15.6, which implements additional code-signing restrictions to mitigate the issue. The public records describe the vulnerability as a downgrade/pa...
CVE-2025-43185
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...
CVE-2025-43185
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...
CVE-2025-31243
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to gain root privileges...
CVE-2025-31243
CVE-2025-31243 is a local permissions issue in macOS where an app may be able to gain root privileges. The description indicates an elevation of privilege from a normal user to root due to insufficient restrictions, with fixes delivered in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequ...
CVE-2025-31280
CVE-2025-31280 affects Apple macOS Sequoia prior to 15.6, where a memory corruption issue can occur when processing a malicious file, leading to heap corruption. Apple has fixed the issue in Sequoia 15.6 by applying improved validation. Impact is described as high with local attack vectors and us...
CVE-2025-31280
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted file may lead to heap corruption...
CVE-2025-31280
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted file may lead to heap corruption...
CVE-2025-31278
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...