CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in tvOS 26.1, macOS Tahoe 26, watchOS 26.1, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43272

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43190

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43190

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, visionOS 26, macOS Sequoia 15.7. An app may be able to access sensitive user data...

CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7. An app may be able to access sensitive user data...

UBUNTU-CVE-2025-43342

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...

UBUNTU-CVE-2025-43272

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43190

A parsing issue in the handling of directory paths exists across several Apple operating systems, including iOS 26 , iPadOS 26 , macOS Sequoia 15.7 , macOS Sonoma 14.8 , macOS Tahoe 26 , visionOS 26 , and watchOS 26 . The root cause is a lack of sufficient path validation, which could allow an ap...

CVE-2025-43329

A permissions vulnerability in the Sandbox environment across multiple Apple products, including iOS , iPadOS , tvOS , watchOS , and macOS , could allow a malicious application to break out of its sandbox. The issue is caused by errors in the authentication process. This vulnerability has been ad...

CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...

CVE-2025-43355

A type confusion vulnerability exists in the MobileStorageMounter component across several Apple operating systems, including iOS, iPadOS, tvOS, watchOS, visionOS, and macOS . This issue stems from improper memory handling and can be exploited by an application to cause a denial-of-service (DoS)....

CVE-2025-43302

An out-of-bounds write issue exists in various Apple operating systems, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The vulnerability is caused by insufficient bounds checking, which could allow a malicious application to cause unexpected system termination . This issue has b...

CVE-2025-43272

The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43272

CVE-2025-43272 is a vulnerability in WebKit -based products, including Safari , iOS , iPadOS , macOS Tahoe , visionOS , and watchOS (versions 26), as well as webkit2gtk3 on openSUSE Leap 16.0 and TencentOS Server 2 . The root cause is improper memory handling , which can be triggered by processin...

CVE-2025-43317

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in visionOS 26, tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An input validation issue was addressed...

PT-2025-37795

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.48.7-0ubuntu0.25.04.2 WebKitGTK affected versions not specified Description WebKitGTK is a port of the WebKit web rendering engine to the GTK platform. Several security issues were discovered in the WebKitGTK Web...

PT-2025-37858

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 26 Apple watchOS versions prior to 26 Apple visionOS versions prior to 26 Apple macOS versions prior to Tahoe 26 Apple iOS versions prior to 26 Apple iPadOS versions prior to 26 Description: Processing a malicious...

PT-2025-37845

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 26 iPadOS versions prior to 26 macOS versions prior to Tahoe 26 tvOS versions prior to 26 watchOS versions prior to 26 visionOS versions prior to 26 Description: A logging issue allowed an application to potentially acce...