CVE-2025-43202

This CVE (CVE-2025-43202) concerns memory handling in Apple platforms. Affects Apple iOS and iPadOS before 18.6 and macOS Sequoia before 15.6; processing a file may lead to memory corruption due to the underlying memory handling issue. The issue is fixed in iOS 18.6, iPadOS 18.6, and macOS Sequoi...

CVE-2025-43209

CVE-2025-43209 is an out-of-bounds access issue in Apple software that is addressed by updates to multiple OSes. Affected and fixed components (as per the CVE entry) include Safari/web content processing and various Apple platforms: macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7, i...

CVE-2025-43243

CVE-2025-43243 is a macOS vulnerability describing a permissions issue that could allow an app to modify protected parts of the file system. The issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. According to the CVE entry, the CVSS v3.1 base score is 9.8 (CRITIC...

CVE-2025-43262

CVE-2025-43262 affects macOS Tahoe 26. The issue is a permissions/privilege-related weakness where USB Restricted Mode may not be applied to accessories connected during boot. Apple fixed this in macOS Tahoe 26 by applying additional restrictions to permissions handling. The vulnerability is loca...

CVE-2025-43266

CVE-2025-43266 : A permissions issue could permit a sandbox breakout in macOS apps. The vulnerability is addressed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. No explicit exploitation or in‑the‑wild details are provided in the connected documents.

CVE-2025-43317

CVE-2025-43317 describes a permissions issue in Apple platforms. The vulnerability may allow an app to access sensitive user data and is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The CVSS data indicate a local attack vector with low attack complexity, no privileges require...

CVE-2025-43330

CVE-2025-43330 affects macOS Sequoia (15.7) and macOS Tahoe (26) where an app could break out of its sandbox due to vulnerable code. Apple fixed the issue by removing the vulnerable code in Sequoia 15.7; Tahoe has related security updates. The public documentation notes sandbox escape risk and de...

CVE-2025-43338

CVE-2025-43338 is an out-of-bounds access issue that affects macOS during processing of a malicious media file, potentially causing an app termination or memory corruption. The vulnerability is addressed by bounds checking improvements and is fixed in macOS Tahoe 26 and macOS Sonoma 14.8.2 (per t...

CVE-2025-43381

CVE-2025-43381 concerns macOS Tahoe prior to 26.1, where symbolic link handling could enable a malicious app to delete protected user data. The issue is addressed in macOS Tahoe 26.1 as part of a fix for symlink mishandling. Impact description and remediation indicate that upgrading to Tahoe 26.1...

CVE-2025-43417

CVE-2025-43417 describes a path-handling issue in macOS that could allow an app to access sensitive user data. The vulnerability is documented as fixed in macOS Sonoma 14.8.4 and macOS Tahoe 26.2 (per the initial CVE record and Apple advisories). The available connected documents consistently ref...

CVE-2025-46276

CVE-2025-46276 is an information-disclosure issue addressed by updates across Apple platforms: watchOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2, iOS 18.7.3/iPadOS 18.7.3, and iOS 26.2/iPadOS 26.2. The connected advisories confirm a vulnerability could allow...

CVE-2025-46307

The CVE-2025-46307 issue affects macOS, with the logic flaw limited to the system’s access control restrictions. The vulnerability is described as a logic issue that could allow an app to access sensitive user data. The impact is tied to local access (AV:L, PR:L) with high confidentiality impact,...

CVE-2026-20669

CVE-2026-20669 affects macOS Tahoe 26.3 where a parsing issue in handling directory paths allowed an app to access sensitive user data. The vulnerability stems from insufficient path validation, with Apple’s security content stating the issue is resolved by the Tahoe 26.3 update. Evidence across ...

CVE-2025-24268

The CVE-2025-24268 issue is tied to macOS Sequoia: a parsing problem in the handling of directory paths allowed an application to access sensitive user data. Root cause: inadequate path validation. Affected versions are prior to macOS Sequoia 15.4; the fix is implemented in Sequoia 15.4. Practica...

CVE-2025-43219

Technical details about CVE-2025-43219 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-43220

Apple CVE-2025-43220 relates to insufficient symlink validation. Affected products include iPadOS 17.7.9 and macOS 15.6 Sequoia, 14.7.7 Sonoma, and 13.7.7 Ventura. The issue may allow an app to access protected user data. It is addressed by Apple through updates to those OS versions (per the CVE ...

CVE-2025-43247

CVE-2025-43247 describes a permissions issue in macOS. A malicious app with root privileges could modify system files. Affected: macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Impact per provided entry: confidentiality = Low, integrity = High, availability = None. Base score 5.5 (...

CVE-2025-43248

CVE-2025-43248 is a local privilege-escalation vulnerability in macOS Sequoia (15.6) and macOS Sonoma (14.7.7). The issue is described as a logic error that was addressed by improved restrictions, with the fixed versions specifically listed as macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The CVSS ...

CVE-2025-43279

CVE-2025-43279 concerns a privacy issue in macOS Tahoe 26 where private data was not properly redacted in log entries, potentially allowing an app to access user‑sensitive data. The problem is fixed in macOS Tahoe 26; remediation is to update to Tahoe 26 or later. The CVSS 3.1 impact suggests Loc...

CVE-2025-43333

CVE-2025-43333 refers to a permissions issue in macOS that could allow an app to gain root privileges. The available description and connected documents indicate this was mitigated by additional restrictions and is fixed in macOS Tahoe 26. The Apple security content confirms an authority-level im...

CVE-2025-43361

CVE-2025-43361 describes an out-of-bounds read that could allow a malicious app to read kernel memory. Apple and multiple vendors/feeds confirm the root cause is insufficient bounds checking and note fixes across multiple OS versions: tvOS 26, watchOS 26, iOS 26, iPadOS 26, macOS Sonoma 14.8.2, m...

CVE-2025-43377

CVE-2025-43377 is an out-of-bounds read vulnerability addressed by Apple in iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The Red Hat advisory corroborates the same issue and fix. Affected component involves memory bounds checking; the issue could allow an app to cause a ...

CVE-2025-43463

CVE-2025-43463 describes a parsing issue in handling directory paths that was mitigated by improved path validation. It affects macOS Sonoma 14.8.3, macOS Tahoe 26.1, and macOS Sequoia 15.7.3, where an app may be able to access sensitive user data. The connected sources corroborate this path-vali...

CVE-2025-43535

CVE-2025-43535 affects WebKitGTK/webkitgtk4. The issue is a memory-handling flaw in WebKitGTK that may cause an unexpected process crash when processing malicious web content. Affected packages include webkitgtk4 (and related webkit2gtk/WebKitGTK deployments) with fixes shipped in WebKitGTK 2.50....

CVE-2025-46278

The CVE-2025-46278 entry affects macOS Tahoe; root cause involves improved handling of caches that could allow an app to access protected user data. The vulnerability is fixed in macOS Tahoe 26.2. Primary sources (NVD/Red Hat/CIRCL/NCSC entries) describe the issue as a cache-handling problem with...

CVE-2025-46306

CVE-2025-46306 affects Apple platforms and Keynote. The issue arises from memory disclosure when processing a maliciously crafted Keynote file, mitigated by improved bounds checks. Affected products/versions include macOS Tahoe 26, Keynote 15.1, iOS 26, and iPadOS 26. The CVE entry indicates a lo...

CVE-2026-20677

CVE-2026-20677 is a race-condition vulnerability related to handling of symbolic links that could allow bypassing sandbox restrictions. Apple fixes indicate this issue affects iOS/iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visionOS 26.3. The root cause is ...

CVE-2025-24188

CVE-2025-24188 is a logic-issue vulnerability addressed by Apple in Safari 18.6 and macOS Sequoia 15.6. The description states that Processing maliciously crafted web content may lead to an unexpected Safari crash, with a fix implemented via improved checks. Affected components include Safari (an...

CVE-2025-31243

CVE-2025-31243 is a local permissions issue in macOS where an app may be able to gain root privileges. The description indicates an elevation of privilege from a normal user to root due to insufficient restrictions, with fixes delivered in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequ...

CVE-2025-43184

CVE-2025-43184 affects macOS Shortcuts settings handling. The issue involves bypassing sensitive Shortcuts app settings, which was addressed by adding an additional user-consent prompt. Apple patches are available in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.4. The underlyin...

CVE-2025-43374

CVE-2025-43374 involves an out-of-bounds read in kernel memory that could be triggered by an attacker in physical proximity. Apple fixes indicate this affects iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, and watchOS 11.5, wi...

CVE-2025-43466

CVE-2025-43466 concerns an injection issue in macOS Tahoe that was addressed by improved input validation. The Apple security content for macOS Tahoe 26.1 states the fix and notes that an app may be able to access sensitive user data. The CVE entry is tied to macOS Tahoe 26.1, with the issue desc...

CVE-2026-20647

CVE-2026-20647 affects macOS Tahoe; description/connected sources confirm an information-disclosure risk where an app could access sensitive user data. Apple addressed the issue with improved data protection, and the fix is included in macOS Tahoe 26.3 (as mirrored by NVD, Red Hat entry, CNVD, an...

CVE-2026-20696

Technical details beyond the high-level description for CVE-2026-20696 are not publicly available in the provided documents. The material confirms an authorization/state-management issue fixed in macOS Tahoe 26.4 affecting an app’s access to user data. Monitor for updates.

CVE-2026-28870

CVE-2026-28870 describes an information leakage vulnerability that was addressed with additional validation. The provided documents indicate fixes in Apple OS 26.4 family: iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. The initial description notes that an ap...

CVE-2025-43185

CVE-2025-43185 relates to a downgrade issue in macOS Sequoia that could allow an app to access protected user data. The fixed version is macOS Sequoia 15.6, which implements additional code-signing restrictions to mitigate the issue. The public records describe the vulnerability as a downgrade/pa...

CVE-2025-43193

CVE-2025-43193 affects macOS components related to memory handling and can lead to a denial-of-service. The NVD entry states the issue was addressed by improved memory handling and is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. The CVSS 3.1 vector indicates network...

CVE-2025-43224

CVE-2025-43224 is an out-of-bounds access issue addressed by improved bounds checking. It affects visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6, and iPadOS 18.6. Processing a malicious media file may terminate an app or corrupt memory. Remediation: upgrade to the fixed OS versions listed....

CVE-2025-43246

CVE-2025-43246 affects macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The issue, addressed with improved checks, could allow an app to access sensitive user data (confidentiality impact high) via a local attack requiring user interaction. Root causes and specific vulnerable components are not detail...

CVE-2025-43273

CVE-2025-43273 affects macOS Sonoma components (CoreMedia, others) where a permission issue could allow a sandboxed process to bypass sandbox restrictions. The issue is fixed in macOS Sonoma 14.8; apply the Sonoma 14.8 update to remediate. The CVSS data provided indicates a high-impact, privilege...

CVE-2025-43318

CVE-2025-43318 affects macOS Tahoe 26. The issue arises from insufficient entitlement checks, allowing an app with root privileges to access private information. Apple indicates the vulnerability is addressed by additional entitlement checks and fixes are shipped in macOS Tahoe 26. Affected behav...

CVE-2025-46285

CVE-2025-46285 describes an integer overflow that was mitigated by adopting 64-bit timestamps. The published fixes affect multiple Apple platforms: watchOS 26.2; macOS Sonoma 14.8.3; iOS 18.7.3 and iOS 26.2; iPadOS 18.7.3 and 26.2; macOS Tahoe 26.2; macOS Sequoia 15.7.3; visionOS 26.2; and tvOS 2...

CVE-2026-20602

CVE-2026-20602 affects macOS and was addressed by improved handling of caches. The vulnerability is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3, and it could allow an app to cause a denial-of-service. No exploit details are provided in the documents beyond the fix ver...

CVE-2024-44303

CVE-2024-44303 affects macOS Sequoia, with the issue fixed in Sequoia 15.1. The vulnerability allows a malicious application to modify protected parts of the file system due to insufficient checks; Apple’s description notes the fix involved improved checks. Connected sources corroborate that the ...

CVE-2025-43188

CVE-2025-43188 affects macOS Sequoia; a permissions issue could allow a malicious app to gain root privileges. The vulnerability is fixed in macOS Sequoia 15.6. The advisory notes a local/privilege-elevation risk with user interaction required for exploitation; apply the Sequoia 15.6 update to mi...

CVE-2025-43191

CVE-2025-43191 is a path handling issue in macOS components that was mitigated by improved input validation. The NVD entry indicates this affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, with the vulnerability potentially enabling a local attacker to cause a denial-of-se...

CVE-2025-43245

CVE-2025-43245 describes a downgrade issue mitigated by added code-signing restrictions in macOS. The vulnerability affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, where an app may be able to access protected user data. The NVD entry specifies a high/critical risk profi...

CVE-2025-43276

Technical details about CVE-2025-43276 (affected product, root cause, impact, or fix specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and CVE records for concrete technical information.

CVE-2025-43327

Safari 26 on macOS Sonoma/Sequoia fixes CVE-2025-43327, where visiting a malicious website could lead to address bar spoofing. The issue is resolved by adding additional logic in Safari. Affected product: Safari (macOS Sonoma/Sequoia). Remediation: update to Safari 26. If you need details, see th...

CVE-2025-46298

CVE-2025-46298 affects Apple platforms including tvOS, Safari, watchOS, visionOS, iOS, iPadOS, and macOS Tahoe. The description across sources indicates a memory handling vulnerability that could cause an unexpected process crash when processing maliciously crafted web content. Apple patches are ...