CVE-2025-43273

A permissions issue in macOS CoreMedia allows a sandboxed process to circumvent sandbox restrictions . This vulnerability was addressed by implementing additional sandbox restrictions. The issue is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.8 . While the vulnerability is confirmed, no specif...

CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-43225

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...

CVE-2025-43248

A logic issue exists in Apple macOS Sequoia and Apple macOS Sonoma that could allow a malicious application to gain root privileges . The vulnerability has been addressed with improved restrictions. The issue is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7 . No specific exploit links or in...

CVE-2025-43248

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges...

CVE-2025-43248

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain root privileges...

CVE-2025-43229

A vulnerability exists in the WebKit component used by Apple Safari and macOS Sequoia (versions prior to 15.6 and 18.6, respectively). The root cause is related to a logic issue in state management , where processing specially crafted web content can lead to universal cross-site scripting (XSS) ....

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2025-43189

Apple macOS Sequoia and macOS Sonoma are affected by a security vulnerability arising from memory mishandling . A malicious application could exploit this issue to read kernel memory . This vulnerability has been addressed with improved memory handling in macOS Sequoia 15.6 and macOS Sonoma 14.7....

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-43222

A use-after-free vulnerability exists in the CFNetwork framework on iPadOS and macOS systems, where memory is accessed after being released. Exploitation of this flaw by a remote attacker may result in service interruptions or unexpected app termination . This issue has been addressed by removing...

CVE-2025-43222

A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An attacker may be able to cause unexpected app termination...

CVE-2025-31275

A permissions issue exists in macOS Sequoia (versions prior to 15.6 ) where a sandboxed process may be able to launch any installed application. This vulnerability was addressed with additional restrictions. The issue is fixed in macOS Sequoia 15.6 . Exploitation details and specific attack vecto...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...

CVE-2025-43243

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system...

CVE-2025-43243

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system...