CVE-2025-24195

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges...

CVE-2025-24204

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data...

CVE-2025-24204

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data...

CVE-2025-24204

This vulnerability in macOS allows an attacker to read any process memory on SIP-enabled systems. The root cause is the inclusion of an excessively powerful entitlement, com.apple.system-task-ports.read, in the gcore binary. Successful exploitation can lead to several critical impacts, including ...

CVE-2025-24212

This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24212

A vulnerability in watchOS 11.4 allows an app to break out of its sandbox due to a path handling issue. The flaw was addressed with improved validation. Affected versions include iOS 18.4 , iPadOS 18.4 , iPadOS 17.7.6 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , tvOS 18.4 ,...

CVE-2025-24245

This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords...

CVE-2025-24245

This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords...

CVE-2025-24245

A vulnerability in Authentication Services on macOS Sequoia allows a malicious app to access a user's saved passwords . The root cause was an issue where verification code attempts did not have sufficient separation. This flaw has been addressed by introducing a delay between verification code at...

CVE-2025-24196

A type confusion vulnerability exists in macOS due to insufficient memory handling. An attacker with user privileges could exploit this issue to read kernel memory . This vulnerability is addressed in macOS Sequoia 15.4 and macOS Sonoma 14.7.5 . No specific exploit links or in-the-wild exploitati...

CVE-2025-24250

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-24196

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory...

CVE-2025-24250

A vulnerability in macOS allows a malicious application acting as an HTTPS proxy to gain unauthorized access to sensitive user data . This issue was addressed through improved access restrictions. The vulnerability is fixed in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . ...

CVE-2025-24250

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-24196

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory...

CVE-2025-24207

A permissions issue in macOS allows an application to enable iCloud storage features without explicit user consent. This vulnerability was addressed by implementing additional restrictions. The issue is fixed in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . While some rela...

CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24207

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent...

CVE-2025-24246

Apple has addressed an injection issue in macOS involving inadequate validation, which could allow an application to access user-sensitive data . The vulnerability is fixed in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . While specific exploitation details are not provide...

CVE-2025-24246

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data...