PT-2025-31297

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.6 macOS Sequoia versions prior to 15.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 tvOS versions prior to 18.6 watchOS versions prior to 11.6 visionOS versions prior to 2.6 Description The issue involve...

PT-2025-35155

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 macOS Sequoia versions prior to 15.6 Description An out-of-bounds read issue existed due to insufficient bounds checking. This could allow an application to cause...

PT-2025-31274 · Apple · Macos Sequoia +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 macOS Sequoia versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. An app may be able to gain root privileges...

PT-2025-31349 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A malicious application functioning as an HTTPS proxy could potentially gain access to sensitive user data due to insufficient access...

CVE-2025-31277: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

PT-2025-35162

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 macOS versions prior to Sequoia 15.6 Description: The issue was addressed by removing the vulnerable code. Running an hdiutil command may unexpectedly execute...

PT-2025-31302

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.9 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 Description: The issue involves incorrect symlink resolution prior to file access. Exploitation...

PT-2025-31343 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A path handling issue existed due to insufficient validation. This could allow an application to gain root privileges. Recommendations:...

PT-2025-31303 · Apple · Macos Sequoia +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.6 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 Description: An out-of-bounds access issue exists due to insufficient bounds checking...

PT-2025-31344 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: An application may be able to access sensitive user data due to missing entitlement checks. This issue was addressed with additional...

PT-2025-31324 · Apple · Macos Ventura 13.7.7 +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 Description: A logic issue was addressed with improved checks. An app may be able to gain root privileges. Recommendations: Upda...

PT-2025-31285

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 visionOS versions prior to 2.6 macOS Ventura versio...

PT-2025-31323 · Apple · Macos Sequoia 15.6 +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.6 macOS versions prior to Sonoma 14.7.7 Description: A logic issue was addressed with improved restrictions. A malicious app may be able to gain root privileges. Recommendations: Update to macOS Sequoia 15.6...

About the security content of macOS Sequoia 15.6

About the security content of macOS Sequoia 15.6 This document describes the security content of macOS Sequoia 15.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2025-55078

🟠 CVE-2025-43257 - High This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox. https://t.co/fSGUiEpohJ https://t.co/OOssW71lja...

PT-2025-31307 · Apple · Macos Ventura +4

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.9 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 Description: A logging issue existed due to insufficient data redaction. This allowed an...

SUSE CVE-2023-53160

The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic...

SUSE CVE-2024-58261

The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type...

CVE-2024-58261

A flaw was found in sequoia-openpgp. Processing RawCertParser operations with unsupported primary key types triggers an infinite loop of error messages. This flaw allows a local attacker to provide a specially crafted certificate file, resulting in a denial of service due to resource exhaustion...

GHSA-RFX3-FFRP-6875 Duplicate Advisory: sequoia-openpgp vulnerable to out-of-bounds array access leading to panic

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-25mx-8f3v-8wh7. This link is maintained to preserve external references. Original Description The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic...