17 matches found
CVE-2025-43323
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user...
CVE-2025-43323
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user...
EUVD-2025-29286
Malicious code in bioql PyPI...
CVE-2025-43329
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to break out of its sandbox...
CVE-2025-43347
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed...
CVE-2025-43343
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2025-43354
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
DEBIAN-CVE-2025-43343
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-43329
A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An app may be able to break out of its sandbox...
CVE-2025-43317
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-43329
A permissions vulnerability in the Sandbox environment across multiple Apple products, including iOS , iPadOS , tvOS , watchOS , and macOS , could allow a malicious application to break out of its sandbox. The issue is caused by errors in the authentication process. This vulnerability has been ad...
CVE-2025-43355
A type confusion vulnerability exists in the MobileStorageMounter component across several Apple operating systems, including iOS, iPadOS, tvOS, watchOS, visionOS, and macOS . This issue stems from improper memory handling and can be exploited by an application to cause a denial-of-service (DoS)....
CVE-2025-43344: Out-of-bounds Read
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination...
CVE-2025-43303: Insertion of Sensitive Information into Log File
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-43354: Insertion of Sensitive Information into Log File
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
PT-2025-37858
Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 26 Apple watchOS versions prior to 26 Apple visionOS versions prior to 26 Apple macOS versions prior to Tahoe 26 Apple iOS versions prior to 26 Apple iPadOS versions prior to 26 Description: Processing a malicious...
About the security content of tvOS 26
About the security content of tvOS 26 This document describes the security content of tvOS 26. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...