About the security content of macOS Sequoia 15.3

About the security content of macOS Sequoia 15.3 This document describes the security content of macOS Sequoia 15.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2025-5283 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 Description: The issue is related to parsing a file, which may lead to an unexpected app termination. It was addressed with...

Apple iOS和Apple iPadOS 安全漏洞

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. Apple macOS Sequoia and Apple macOS Sonoma contain a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Apple macOS 安全漏洞

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from an information disclosure vulnerability that is caused due to an information disclosure issue in the FaceTime component when using a specially crafted application. An attacker can...

PT-2025-47805

Name of the Vulnerable Software and Affected Versions macOS versions prior to Ventura 13.7.3 macOS versions prior to Sonoma 14.7.3 macOS versions prior to Sequoia 15.5 Description A flaw exists in how the operating system parses directory paths. This can lead to an application gaining access to...

CVE-2025-24150: Improper Neutralization of Special Elements used in a Command

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection...

CVE-2024-54542: Missing Authorization

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication...

CVE-2024-54518: Out-of-bounds Read

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory...

CVE-2025-24109: Exposure of Sensitive Information to an Unauthorized Actor

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24120: Missing Release of Resource after Effective Lifetime

This issue was addressed by improved management of object lifetimes. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An attacker may be able to cause unexpected app termination...

CVE-2025-24156: Integer Overflow or Wraparound

An integer overflow was addressed through improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to elevate privileges...

CVE-2025-24145: Insertion of Sensitive Information into Log File

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app may be able to view a contact's phone number in system logs...

CVE-2024-54516: Improper Preservation of Permissions

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to approve a launch daemon without user consent...

CVE-2025-24118: Out-of-bounds Write

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2024-54550: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs...

CVE-2025-24153: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2025-24108: Missing Authorization

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data...

CVE-2025-24135: Incorrect Default Permissions

This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges...

CVE-2025-24102: Exposure of Sensitive Information to an Unauthorized Actor

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to determine a user’s current location...

PT-2025-22011 · Apple · Ipados +6

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 iPadOS versions prior to 17.7.4 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 Description: The issue was...