CVE-2026-20621

CVE-2026-20621 is an Apple memory-handling issue that could allow an app to cause an unexpected system termination or corrupt kernel memory. The vulnerability is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visio...

CVE-2026-28830

CVE-2026-28830 describes a race condition resolved by additional input validation. Multiple connected sources (NVD, EUVD-2026-29216, CVE listings, and vulnerability enrichment) indicate the issue is fixed in macOS Tahoe 26.4 and that an app could potentially access sensitive user data. The availa...

CVE-2025-24119

CVE-2025-24119 affects macOS via a vulnerability in state management. The issue could allow an app to execute arbitrary code outside its sandbox or with certain elevated privileges. Apple cites mitigations in specific releases: macOS Sequoia 15.3, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7, in...

CVE-2025-24284

Summary of CVE-2025-24284: A sandbox breakout vulnerability affecting macOS prior to Sequoia 15.4. The issue allows an application to break out of its sandbox, with the fixed version being macOS Sequoia 15.4. No exploit details are provided in the connected documents. Remediation is to upgrade to...

CVE-2025-43199

CVE-2025-43199 is a permissions issue in macOS that could allow a malicious app to gain root privileges. The vulnerability is addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The NVD entry provides exact fixed versions an...

CVE-2025-43244

The CVE-2025-43244 entry documents a race condition resolved by improved state handling. Affected software includes macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, with the issue allowing an app to cause an unexpected system termination. The vulnerability is characterized by hi...

CVE-2025-43249

CVE-2025-43249 is a logic issue in macOS that can let an app gain root privileges. It is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The CVSS vector indicates a local exploit with low attack complexity and required user interaction (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/...

CVE-2025-43252

CVE-2025-43252 affects macOS Sequoia; the issue stems from resolving symlinks that could disclose sensitive user data. It was addressed by adding an additional user-consent prompt and is fixed in macOS Sequoia 15.6. The CVSS metrics in the initial document indicate a MEDIUM base severity with con...

CVE-2025-43256

The CVE-2025-43256 issue affects macOS Sequoia and macOS Sonoma, tied to a state-management issue that could allow an app to gain root privileges via local access. Publicly documented fixes are macOS Sequoia 15.6 and macOS Sonoma 14.7.7. If exploiting details exist in the provided sources, they a...

CVE-2025-43260

CVE-2025-43260 affects Apple macOS Sequoia (15.6) and macOS Sonoma (14.7.7). The issue could allow an app to hijack entitlements granted to other privileged apps, representing a local-attack surface with low confidentiality/ integrity impact per the provided metrics. The vulnerability is mitigate...

CVE-2025-43384

CVE-2025-43384 affects multiple Apple platforms (tvOS 26.1; macOS Tahoe 26.1; iOS 26.1/iPadOS 18.7.2; macOS Sequoia 15.7.2; visionOS 26.1). Root cause: out-of-bounds access during processing of a malicious media file, leading to possible app termination or memory corruption. Impact is limited to ...

CVE-2025-43406

CVE-2025-43406 corresponds to a logic/restrictions issue in macOS Tahoe that could allow an app to access sensitive user data. The vulnerability is described as a logic issue addressed by improved restrictions and is fixed in macOS Tahoe 26.1. Affected component is within macOS Tahoe’s security m...

CVE-2026-20629

CVE-2026-20629 refers to a privacy issue in macOS Tahoe 26.3 where improved handling of temporary files mitigates a risk that could allow an app to access user‑sensitive data. The vulnerability is documented in multiple sources (NVD, Red Hat, OSV, NCSC advisories) with the core description being ...

CVE-2026-20630

Summary: CVE-2026-20630 describes a permissions-related information-disclosure vulnerability in macOS Tahoe. Exploitation could allow an app to access protected user data. The issue is addressed in macOS Tahoe 26.3. The CVSS vector indicates a local attack with low complexity and requires low pri...

CVE-2025-31275

CVE-2025-31275 affects macOS Sequoia, with a permissions issue that could allow a sandboxed process to launch any installed app. The vulnerability is fixed in macOS Sequoia 15.6. Remediation: upgrade to Sequoia 15.6 (and apply Apple’s security updates). The CVE entry is corroborated by NVD/NIST a...

CVE-2025-43207

CVE-2025-43207 affects macOS Tahoe 26. The issue is a privilege mismanagement/entitlements problem that could allow an app to access user-sensitive data. Apple fixed it in Tahoe 26 by improving entitlements. No exploitation details are provided in the available documents. Remediation: update/prov...

CVE-2025-43251

CVE-2025-43251 affects macOS Sequoia 15.6 (fixed in 15.6). The issue is an authorization flaw in state management that could let a local attacker access Keychain items (CONFIDENTIALITY impact) with LOW privileges and no user interaction. CVSS: LOCAL attack vector, LOW attack complexity, PRIVilege...

CVE-2025-43267

CVE-2025-43267 describes an injection issue that was mitigated by improved input validation. The vulnerability affects macOS Sequoia prior to 15.6, with the fixed version being macOS Sequoia 15.6. The impact is that an app may be able to access sensitive user data. The available connected docs co...

CVE-2025-43297

CVE-2025-43297 describes a type-confusion issue in macOS Tahoe (26) that is mitigated by improved memory handling. The vulnerability could allow an app to cause a denial of service, with exploitation described as local (requires no user interaction) and affecting the Availability impact. The fixe...

CVE-2025-43512

CVE-2025-43512 is a logic-issue privilege-escalation vulnerability affecting Apple platforms. Connected sources indicate the kernel component primarily at fault, enabling an app to elevate privileges. Apple fixed this in iOS/iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Taho...

CVE-2025-43519

This CVE (CVE-2025-43519) concerns a permissions issue in macOS that could allow an app to access sensitive user data. Concrete details in connected docs show fixes are included in macOS Tahoe 26.2, macOS Sequoia 15.7.3, and macOS Sonoma 14.8.3. The issue is addressed by these OS updates; no expl...

CVE-2025-46315

CVE-2025-46315 describes a permissions issue in macOS Tahoe prior to update. An application may be able to access protected user data due to insufficient restrictions. Affected software is macOS Tahoe; the fix is implemented in macOS Tahoe 26.1. Practical impact is high (C:H/I:N/A:N per CVSS 3.1 ...

CVE-2026-20603

CVE-2026-20603 affects macOS Tahoe prior to 26.3, where an app with root privileges may access private information due to insufficient redaction of sensitive data. The issue is resolved in macOS Tahoe 26.3. Remediation: update to Tahoe 26.3 or later to apply the fix. This aligns with public advis...

CVE-2026-20623

CVE-2026-20623 affects macOS Tahoe; a permissions issue allowed an app to access protected user data. The root cause was addressed by removing the vulnerable code and the issue is fixed in macOS Tahoe 26.3. Affected scope is demonstrated by the CVSS vector indicating local access with user intera...

CVE-2026-28882

CVE-2026-28882 affects Apple platforms (iOS/iPadOS, macOS Tahoe, tvOS, visionOS, watchOS). The issue allows enumerating a user’s installed apps due to insufficient checks and is fixed in Apple releases: iOS/iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Attacker could expl...

CVE-2025-43197

CVE-2025-43197 affects macOS where the issue was addressed with additional entitlement checks. The NVD entry states it is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, and that an app may be able to access sensitive user data. These details provide concrete informati...

CVE-2025-43232

CVE-2025-43232 describes a permissions issue in macOS where an app may bypass certain Privacy preferences. The entry lists a high-severity impact (C/H/I/A) with CVSS 3.1 base score 9.8 and indicates the vulnerability is associated with network attack vector, no privileges required, and no user in...

CVE-2025-43234

CVE-2025-43234 involves multiple memory corruption issues fixed by improved input validation in Apple platforms. The NVD entry states vulnerable components are tied to texture handling, with successful exploitation potentially causing an app to terminate unexpectedly. Affected products and fixed ...

CVE-2025-43296

CVE-2025-43296 is tied to macOS Tahoe 26, where a logic issue in validation could allow an app to bypass Gatekeeper checks. The connected Red Hat/EUVD/NVD/NVD entries confirm the same description and indicate Apple patched this in Tahoe 26. Impact is limited to bypassing Gatekeeper; the CVSS metr...

CVE-2025-43339

CVE-2025-43339 concerns an access issue in macOS Tahoe prior to 26.1 where a malicious app could access sensitive user data. The PT-2025-55367 entry corroborates this and states the vulnerability is mitigated by additional sandbox restrictions, with the fix available in macOS Tahoe 26.1. Affected...

CVE-2025-43410

CVE-2025-43410 affects macOS where an attacker with physical access could view deleted notes due to improved handling of caches. The vulnerability is tied to macOS Sequoia (15.7.2), macOS Tahoe (26.2), and macOS Sonoma (14.8.2) releases, which patch the issue. Connected disclosures confirm the ro...

CVE-2025-43516

The CVE-2025-43516 issue is a session-management vulnerability in macOS where a user with Voice Control enabled may transcribe another user’s activity. Affected products are macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, and macOS Tahoe 26.2, which include fixes with improved checks. Remediation is v...

CVE-2025-46283

CVE-2025-46283 describes a logic issue resolved by improved validation in macOS Tahoe 26.2. The available descriptions indicate that, prior to the fix, an app may be able to access sensitive user data. References across Red Hat, NVD, CIRCL, and Apple security content consistently link the issue t...

CVE-2025-46290

CVE-2025-46290 is a logic-issue vulnerability affecting multiple Apple platforms. The provided documents confirm a remote denial-of-service impact and specify fixes across several OS versions: Apple iOS/iPadOS 18.7.3 and 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2 (and relat...

CVE-2026-20662

The CVE-2026-20662 entry concerns an authorization issue resolved by improved state management in macOS Sequoia 15.7.4 and macOS Tahoe 26.3. The vulnerability enables an attacker with physical access to a locked device to view sensitive user information. Public references in the connected documen...

CVE-2026-28861

CVE-2026-28861 is an Apple vulnerability tied to a logic issue addressed by improved state management. It allows a malicious website to access script message handlers intended for other origins. The issue is fixed in: Safari 26.4, iOS 18.7.7 / iPadOS 18.7.7, iOS 26.4 / iPadOS 26.4, macOS Tahoe 26...

CVE-2025-31248

CVE-2025-31248 involves a parsing issue in the handling of directory paths. The root cause is improper path validation, addressed by and fixed in macOS Ventura 13.7.3, macOS Sequoia 15.5, and macOS Sonoma 14.7.3. Impact per the sources: an app may be able to access sensitive user data due to the ...

CVE-2025-43198

The CVE-2025-43198 issue affects macOS Sequoia and macOS Sonoma; the vulnerability could allow an app to access protected user data. It has been addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.6 and macOS Sonoma 14.7.7. The available documents do not specify the exact r...

CVE-2025-43204

CVE-2025-43204 targets macOS Tahoe 26, with the underlying issue described as vulnerable code being removed to fix a sandbox breakout risk. Affected product: macOS Tahoe 26. Root cause: removal of the vulnerable code (no further technical specifics provided in the documents). Impact: an app may b...

CVE-2025-43218

CVE-2025-43218 describes an out-of-bounds read in macOS Sequoia caused by insufficient input validation while processing malicious USD files. The vulnerability can disclose memory contents and is fixed in macOS Sequoia 15.6. Affected software is macOS Sequoia before the 15.6 update; the descripti...

CVE-2025-43264

CVE-2025-43264 affects Apple macOS Sequoia, with the issue tied to memory handling in image processing that can corrupt process memory. The vulnerability is fixed in macOS Sequoia 15.6. According to the provided metrics, the CVSS v3.1 base score is 8.8 (High) with an attack vector of NETWORK, att...

CVE-2025-43287

CVE-2025-43287 affects macOS Tahoe (macOS 26) and is a memory corruption issue triggered by processing specially crafted images. The root cause is described as “improved memory handling” in the fixed release. Impact is stated as high for confidentiality and availability, with local attack vector ...

CVE-2025-43307

Summary of CVE-2025-43307 (macOS Tahoe 26): The issue, described as an insufficient-authorization/validation problem, could allow an app to access sensitive user data. It is tied to macOS Tahoe 26 and is fixed in that release. The vulnerability is characterized by a local attack vector with low a...

CVE-2025-43328

CVE-2025-43328 affects macOS Tahoe (26.x). Description across sources confirms a local permissions issue where an app may access sensitive user data. The flaw is addressed by added restrictions in macOS Tahoe 26, effectively fix/versioned in that release. No exploitation vectors or detailed root-...

CVE-2025-43388

CVE-2025-43388 describes an injection issue in macOS Tahoe prior to 26.1 caused by inadequate input validation. The vulnerability could allow an app to access sensitive user data. Apple fixed the issue in macOS Tahoe 26.1 through improved validation checks. Public docs from NVD/RELEASE references...

CVE-2025-43464

CVE-2025-43464 concerns a denial-of-service issue in macOS Tahoe prior to 26.1 caused by insufficient input validation when visiting a website. The vulnerability leads to an app denial-of-service, and Apple fixed it in macOS Tahoe 26.1. The NVD and Red Hat entries confirm the DoS impact and the r...

CVE-2025-43470

CVE-2025-43470 is a macOS Tahoe 26.x vulnerability where a standard user could view files from a disk image created by an administrator due to insufficient permission checks. The public descriptions consistently state a permissions issue that was addressed with additional restrictions, and that t...

CVE-2025-43533

CVE-2025-43533 concerns a vulnerability in Apple’s Multi-Touch handling where a malicious HID device could trigger an unexpected process crash. The issue stems from insufficient bounds checking, with fixes described as improved bounds checks and memory handling. Affected products include iOS/iPad...

CVE-2025-46288

The CVE affects Apple platforms (visionOS, iOS, iPadOS, watchOS, macOS Tahoe) with a permissions issue that could allow an app to access sensitive payment tokens. Root cause is insufficient privilege restrictions; the issue is fixed in visionOS 26.2, iOS 26.2, iPadOS 26.2, watchOS 26.2, and macOS...

CVE-2026-20610

CVE-2026-20610 affects macOS Tahoe (26.3) and is tied to an issue in handling symlinks in the Installation Assistant component. The fixed version is macOS Tahoe 26.3, and the vulnerability could allow an app to gain root privileges due to improper symlink handling. The NVD/RH/RedHat and CNVD entr...