CVE-2025-43354

CVE-2025-43354 corresponds to a logging issue that could allow access to sensitive user data. Apple fixes: the vulnerability is addressed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26 with improved data redaction. The Apple security content entry places this issue under Bluetooth, in...

CVE-2026-20648

CVE-2026-20648 is a macOS privacy vulnerability fixed in macOS Tahoe 26.3. Multiple sources (NVD, Red Hat, OSV, NCSC advisories) describe a scenario where sensitive data had been stored in a location with insufficient protection, allowing a malicious app to potentially access notifications from o...

CVE-2026-28859

CVE-2026-28859 affects WebKit-derived runtimes (e.g., WebKitGTK/WebKit in Safari family). Root cause: memory handling changes enabling a malicious website to process restricted web content outside the sandbox. Impact: potential exposure of restricted content outside sandbox; CVSS base score 8.8 (...

CVE-2025-24184

CVE-2025-24184 is an Apple memory-management issue that can cause an Apple system termination. Affected platforms include visionOS 2.3, iOS 18.3, iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The vulnerability is described as caused by improved memory handling in th...

CVE-2025-24224

CVE-2025-24224 is a remote-Trigger risk in Apple OS lineages. Affected: tvOS 18.5; iOS 18.5 and iPadOS 18.5; iPadOS 17.7.9; macOS Sequoia 15.5; watchOS 11.5; visionOS 2.5; macOS Ventura 13.7.7. Description: an issue addressed with improved checks that could allow a remote attacker to cause an une...

CVE-2025-43194

CVE-2025-43194 affects macOS: an issue where an app may modify protected parts of the file system due to insufficient checks. The vulnerability is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. Based on the provided data, the CVSSv3.1 base score is 9.8 (CRITICAL) with...

CVE-2025-43241

CVE-2025-43241 affects macOS: a permissions issue may allow an app to read files outside its sandbox. Fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. Impact: potential confidentiality risk (high). The issue is described as a permissions restriction problem; root cause ...

CVE-2025-43261

Summary of CVE-2025-43261 : A logic issue was addressed with improved checks that could allow an app to break out of its sandbox. This vulnerability is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The NVD entry assigns a high impact (confidentiality, integrity, avai...

CVE-2025-43337

CVE-2025-43337 : An access issue in macOS shows that an app may be able to access sensitive user data due to sandbox restrictions. It is fixed in macOS Sequoia 15.7.2 and macOS Tahoe 26. Update to Sequoia 15.7.2 or Tahoe 26 to mitigate. No exploitation details are provided in the supplied documen...

CVE-2025-43411

CVE-2025-43411 affects macOS, with fixes in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue arises from insufficient entitlement checks, allowing an app to access user‑sensitive data. The vulnerability is described as addressed by adding entitlement checks; impact is li...

CVE-2025-46277

CVE-2025-46277 affects Apple software including macOS Tahoe 26.2, iOS 26.2, iPadOS 26.2, and watchOS 26.2. Description: a logging issue was addressed with improved data redaction, and an app may be able to access a user’s Safari history. Root cause: not explicitly stated beyond the logging/data r...

CVE-2026-20681

The CVE-2026-20681 entry relates to a privacy issue in macOS Tahoe 26.3 where an app could access information about a user’s contacts due to insufficient redaction in log entries. Publicly referenced sources (Apple advisory and NCSC) confirm the vulnerability affects the Contacts component of mac...

CVE-2025-31281

CVE-2025-31281 affects Apple OSes including visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6. It stems from an input validation/memory handling issue; processing a maliciously crafted file may cause an app to terminate unexpectedly. Affected versions should be updated to the ...

CVE-2025-43189

CVE-2025-43189 affects Apple macOS Sequoia and macOS Sonoma. The issue stems from memory mishandling that could allow a malicious application to read kernel memory. It is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The vulnerability is documented with high-severity impact (confidentialit...

CVE-2025-43221

The CVE-2025-43221 issue is an out-of-bounds access vulnerability in media processing that was mitigated by improved bounds checking. Affected platforms include macOS Sequoia 15.6, iOS 18.6, iPadOS 18.6, visionOS 2.6, and tvOS 18.6, where processing a maliciously crafted media file could terminat...

CVE-2025-43239

CVE-2025-43239 is a local memory-out-of-bounds issue in macOS components that triggers when processing a maliciously crafted file, leading to unexpected app termination. Apple fixed it in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7 by improving bounds checking. The CVSS indi...

CVE-2025-43275

CVE-2025-43275 is a race-condition vulnerability in macOS components where insufficient validation allowed an app to break out of its sandbox. The issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. Affected products are macOS releases prior to these updates. The ...

CVE-2025-43303

CVE-2025-43303 describes a logging issue that could allow an app to access sensitive user data. Fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26 and watchOS 26. Vulnerability characteristics: ATT&CK/exploit details not provided; CVSS 3.1 base score 5.5 (Local attack vector, Low attack complexity,...

CVE-2025-43320

CVE-2025-43320 affects Apple macOS Sequoia 15.7.3 and macOS Tahoe 26. The issue allows an app to bypass launch-constraint protections and execute malicious code with elevated privileges. The description indicates the fix involved adding additional logic. Apple security pages associate this CVE wi...

CVE-2025-43340

Apple macOS Tahoe 26 fixes CVE-2025-43340, a permissions issue that could allow an app to break out of its sandbox. The vulnerability is addressed by the Tahoe 26 security update (Apple security content). Affected: macOS Tahoe 26. Root cause: sandbox restrictions were insufficient in some app con...

CVE-2025-43530

CVE-2025-43530 affects macOS Tahoe 26.2, macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, iOS 18.7.3, and iPadOS 18.7.3. The issue was mitigated by improved checks; remediation is via the listed Apple updates. An app may be able to access sensitive user data, per the advisories.

CVE-2025-46282

CVE-2025-46282 concerns Apple macOS Tahoe and Safari where an app could access sensitive user data due to insufficient permissions checks. The issue is fixed in macOS Tahoe 26.2 and Safari 26.2; Apple’s advisories and multiple sources (NVD, Red Hat, CNNVD, CIRCL, etc.) consistently describe the f...

CVE-2025-46301

CVE-2025-46301 is an Apple security issue addressed by Apple in iOS 18.7.5 / iPadOS 18.7.5, iOS 26.2 / iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, and watchOS 26.2. Description and OSV/NVD/NCSC/Nessus entries indicate the root cause was impr...

CVE-2026-20601

CVE-2026-20601 affects macOS Tahoe before the 26.3 release. The issue is a permissions flaw that could allow an app to monitor keystrokes without user consent. Apple fixed it in Tahoe 26.3 by applying additional restrictions. Across connected sources, the vulnerability is tied to a local attack v...

CVE-2025-43250

CVE-2025-43250 describes a path handling issue resolved by improved validation. Affected in Apple macOS releases: Sequoia 15.6, Sonoma 14.7.7, and Ventura 13.7.7. The issue could allow an app to break out of its sandbox, representing a local risk with no user interaction required. Mitigation is t...

CVE-2025-43369

CVE-2025-43369 affects Apple macOS Tahoe 26, where a mishandling of symlinks can allow an app to access protected user data. The root cause is improper symlink handling that could bypass data protections. A fix is available in macOS Tahoe 26; updating the system to that release is the recommended...

CVE-2025-43472

CVE-2025-43472 is a local validation issue in macOS components (notably tied to a root-privilege risk) that Apple fixed in macOS Sonoma 14.8.2, Sequoia 15.7.2, and Tahoe 26.1. The connected documents confirm concrete details: the vulnerability stems from improper input sanitization/validation and...

CVE-2025-46303

The CVE-2025-46303 issue is an Apple-focused vulnerability where a malicious HID device may cause an unexpected process crash due to an out-of-bounds/bounds-check issue resolved by improved checks. Affected products and patched versions include: iOS 18.7.5 and iPadOS 18.7.5; iOS 26.2 and iPadOS 2...

CVE-2025-46308

CVE-2025-46308: An authorization issue related to state management could allow an app to leak sensitive user information. Affected: iOS prior to 18.4, iPadOS prior to 18.4, and macOS Sequoia prior to 15.4. Fixed in iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. Mitigation: update to the fixed ver...

CVE-2026-20611

CoreAudio in Apple platforms is affected by CVE-2026-20611, an out-of-bounds access issue that can cause an app to terminate or memory corruption when processing a malicious media file. Affected products/versions include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4...

CVE-2026-20649

CVE-2026-20649 is an Apple logging-issue vulnerability affecting multiple Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, watchOS) within Game Center that could allow viewing of sensitive user information. The issue is fixed in updates for 26.3 across these OSes (watchOS 26.3, iOS/iPadOS 26.3, m...

CVE-2025-43222

This CVE (CVE-2025-43222) concerns a use-after-free vulnerability fixed by removing the vulnerable code. Affected products and versions include macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. Impact is that an attacker could cause an unexpected application termin...

CVE-2025-43366

CVE-2025-43366 affects macOS Tahoe 26. The issue is an out-of-bounds read due to insufficient bounds checking, which could allow an app to disclose coprocessor memory. Apple has fixed this in macOS Tahoe 26 by improving bounds checking. Documents consistently describe the vulnerability as a memor...

CVE-2025-43526

CVE-2025-43526 affects Apple macOS Tahoe < 26.2 and Safari

CVE-2025-43542

CVE-2025-43542 affects Apple devices via a state-management issue that can cause password fields to be revealed when a device is remotely controlled over FaceTime. Affected products/versions include iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, an...

CVE-2026-20653

CVE-2026-20653 involves a parsing issue in the Shortcuts component related to handling of directory paths. The flaw allows an app to access sensitive user data and is addressed by path validation improvements, with fixes in: iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15...

CVE-2024-40849

CVE-2024-40849 relates to a race condition in macOS Sequoia’s Launch Services component that could allow an app to break out of its sandbox. The primary description across sources confirms the issue is addressed with additional validation and fixes in macOS Sequoia 15.1. Affected software is macO...

CVE-2025-43231

Apple's security content for macOS Sonoma 14.8 remedies CVE-2025-43231, described as a logic issue in LaunchServices that could allow an app to access protected user data. The issue is mitigated by the macOS Sonoma 14.8 update; Apple notes a fix via improved checks in LaunchServices. The CVE entr...

CVE-2025-43281

CVE-2025-43281 affects macOS Sequoia 15.6. The issue is a local privilege escalation that was addressed by improved authentication. Apple’s security content notes that the fix is in Sequoia 15.6, mitigating the elevation-of-privilege risk for affected components (listed under the macOS Sequoia se...

CVE-2025-43357

CVE-2025-43357 is an Apple vulnerability affecting iOS, iPadOS, and related components (Call History) that could allow fingerprinting of a user. The primary documented impact is exposure of sensitive information through redaction issues, with exploitation described as local in scope and requiring...

CVE-2025-43461

CVE-2025-43461 affects macOS Tahoe; the issue is a Symbolic Link Validation Insufficiency fixed in macOS Tahoe 26.1. The vulnerability could allow a locally authenticated app to access protected user data due to insufficient symlink validation. A patch is available with macOS Tahoe 26.1. If not u...

CVE-2025-43517

A privacy issue in macOS log redaction is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2. The flaw allowed an app to access protected user data via log entries; it is addressed by the updated builds listed above. Affected products are macOS variants released around these...

CVE-2025-43531

CVE-2025-43531 is confirmed in WebKitGTK/WebKit2GTK (webkitgtk4) with a reported race-condition that may cause an unexpected process crash when processing malicious web content. The Amazon Linux 2 advisory ALAS2-2025-3114 notes this CVE among multiple WebKitGTK issues and provides a fix in webkit...

CVE-2025-46293

The CVE-2025-46293 issue relates to macOS prior to Sequoia 15.4 where improper handling of symbolic links could allow an app to access protected user data. The root cause is described as improved handling of symlinks in Sequoia 15.4, which fixes the vulnerability. The fix is to update to macOS Se...

CVE-2025-43230

CVE-2025-43230 affects Apple platforms (iPadOS, iOS, macOS Sequoia, watchOS, visionOS, tvOS) with an issue that could allow an app to access user-sensitive data. The vulnerability is addressed by fixes in iPadOS 17.7.9, iPadOS 18.6, iOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, and visio...

CVE-2025-43253

This CVE concerns macOS Sequoia and macOS Sonoma. Root cause: improved input validation allowing a malicious app to launch arbitrary binaries on a trusted device. Affected platforms and fixes: macOS Sequoia 15.6 and macOS Sonoma 14.7.7 address the issue. Remediation: apply the respective updates ...

CVE-2025-46291

CVE-2025-46291 is a logic-issue vulnerability in macOS Tahoe prior to 26.2 where insufficient validation could allow an app to bypass Gatekeeper checks. The cited sources in the initial document and connected records consistently identify the fix as part of macOS Tahoe 26.2. Affected component: G...

CVE-2025-43192

CVE-2025-43192 is a configuration issue in macOS Sequoia and macOS Sonoma that was addressed with restrictions, fixing a vulnerability where account-driven User Enrollment could bypass Lockdown Mode. The root cause is an insufficient configuration restriction. Affected products/versions identifie...

CVE-2025-43195

CVE-2025-43195 describes an environment-variable handling issue in macOS that could allow an app to access sensitive user data. The root cause is improper validation in how environment variables are processed, which was addressed by improved validation in the macOS updates. Affected products incl...

CVE-2025-43202

This CVE (CVE-2025-43202) concerns memory handling in Apple platforms. Affects Apple iOS and iPadOS before 18.6 and macOS Sequoia before 15.6; processing a file may lead to memory corruption due to the underlying memory handling issue. The issue is fixed in iOS 18.6, iPadOS 18.6, and macOS Sequoi...