CVE-2025-31259

CVE-2025-31259 is a macOS Sequoia issue where an input sanitization flaw could let an app gain elevated privileges; it is fixed in macOS Sequoia 15.5 (the Nessus/macOS advisory context confirms the fix and affected product).

CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

CVE-2025-31218

CVE-2025-31218 affects macOS Sequoia 15.5 and earlier where an app could observe hostnames of new network connections via the NetworkExtension path. The issue was addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.5. Reported impact: local attacker may observe hostnames; C...

CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

CVE-2025-31234

CVE-2025-31234: The issue is fixed by OS updates (visionOS 2.5, iOS 18.5 / iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5) after improved input sanitization. The effect could be unexpected system termination or kernel memory corruption. Connected sources confirm updated platforms and published adviso...

CVE-2025-31242

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.3, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. An a...

CVE-2025-30453

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.4, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. A malicious app may be able to gain root privileges...

CVE-2025-30453

The CVE-2025-30453 issue affects macOS DiskArbitration and was fixed by Apple in macOS Sequoia 15.4, macOS Ventura 13.7.6, and macOS Sonoma 14.7.6. Description indicates a local, privilege-escalation vulnerability where a malicious app could gain root privileges due to insufficient permissions ch...

CVE-2025-30453

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. A malicious app may be able to gain root privileges...

CVE-2025-24144

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to leak sensitive kernel state...

CVE-2025-31235

A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to cause unexpected system termination...

CVE-2025-31235

CVE-2025-31235 is a local, memory‑corruption issue in Apple’s coreaudiod where a double‑free leads to an out‑of‑bounds or invalid dereference chain. The connected Google Project Zero write‑up explicates exploitation context for CVE-2025-31235 in coreaudiod alongside CVE-2024-54529, detailing how ...

CVE-2025-31223

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-31258

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox...

CVE-2025-31258

CVE-2025-31258 affects macOS, with a potential sandbox escape via the RemoteViewServices mechanism. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sequoia 15.5 (Apple’s advisory confirms the patch). Affected products prior to the Sequoia 15.5 release could be expose...

CVE-2025-31258

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox...

PT-2025-20770

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.7.7 macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description A privacy issue was addressed by removing sensitive data. A malicious app may be able...

PT-2025-20794 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

PT-2025-20745 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.5 Description: The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. Recommendations: For versions prior to 15.5, update t...

About the security content of macOS Sequoia 15.5

About the security content of macOS Sequoia 15.5 This document describes the security content of macOS Sequoia 15.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...