CVE-2024-44250

CVE-2024-44250 describes a permissions issue in the macOS XPC service that could allow an app to execute arbitrary code outside its sandbox or with elevated privileges. Connected sources consistently attribute the issue to access-control weaknesses in the XPC mechanism and confirm remediation in ...

CVE-2025-31280

CVE-2025-31280 affects Apple macOS Sequoia prior to 15.6, where a memory corruption issue can occur when processing a malicious file, leading to heap corruption. Apple has fixed the issue in Sequoia 15.6 by applying improved validation. Impact is described as high with local attack vectors and us...

CVE-2025-43237

CVE-2025-43237 describes an out‑of‑bounds write in macOS Sequoia prior to 15.6. The underlying issue is an overflow of memory access due to insufficient bounds checking, with the system at risk of an unexpected termination. The entry notes the vulnerability is fixed in macOS Sequoia 15.6; vulnera...

CVE-2025-43259

CVE-2025-43259 is a macOS vulnerability where an attacker with physical access to a locked device may view sensitive user information. The issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The vulnerability affects the confidentiality of data on affected systems...

CVE-2025-43274

The CVE-2025-43274 entry concerns macOS Sequoia where a privacy issue allowed a sandboxed process to bypass sandbox restrictions. Apple fixed it in Sequoia 15.6 by removing the vulnerable code. The vulnerability is described as a sandbox bypass with local impact, and the public records confirm th...

CVE-2025-43403

CVE-2025-43403 affects macOS Sequoia, Sonoma, and Tahoe. Description confirms an authorization issue caused by improved state management, permitting an app to access sensitive user data. Affected products/versions: macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.0+. CVSS shows Local att...

CVE-2025-43468

CVE-2025-43468 affects Intel-based macOS: downgrade issue mitigated by additional code-signing restrictions. Affected releases include macOS Sonoma 14.8.2, Sequoia 15.7.2, and Tahoe 26.1. The issue could allow an app to access sensitive user data. Mitigation/Remediation: fixed in the cited macOS ...

CVE-2025-43506

Summary (CVE-2025-43506) A logic error affecting macOS Tahoe 26.1 related to iCloud Private Relay activation when multiple user accounts are logged in. The issue was resolved in macOS Tahoe 26.1 with improved error handling. The Red Hat and NVD entries corroborate the same vulnerability descripti...

CVE-2026-20618

CVE-2026-20618 affects macOS Tahoe prior to 26.3, where improper handling of temporary files could allow an app to access user‑sensitive data. The issue is fixed in macOS Tahoe 26.3. Affected documentation consistently notes improved handling of temporary files as the remediation. No exploitation...

CVE-2026-20666

CVE-2026-20666 maps to an Apple macOS authorization issue that was mitigated by state-management changes. Affected product: macOS Tahoe 26.3 (and related advisories note fixes in Tahoe 26.3, Sequoia 15.7.4, Sonoma 14.8.4). Vulnerable component/behavior: an authorization flaw that could allow an a...

CVE-2024-40858

CVE-2024-40858 is a permissions-related issue in macOS Sequoia 15.1 where an app may be able to access Contacts without user consent. The vulnerability is fixed in macOS Sequoia 15.1; Apple’s advisories list the impact as an unauthorized access to contact data and assign a CVSS v3.1 base score of...

CVE-2025-30459

The CVE-2025-30459 entry describes a privacy issue in macOS Sequoia where an application may access sensitive user data. A root cause is identified as the presence of vulnerable code that has been removed, with the fix shipped in macOS Sequoia 15.4. Affected software is macOS Sequoia (earlier tha...

CVE-2025-43390

CVE-2025-43390 describes a downgrade issue on Apple macOS that affects Intel-based Macs, addressed by increased code-signing restrictions. The vulnerability is fixed in macOS Sequoia 15.7.2 and macOS Tahoe 26.1; an app may access user‑sensitive data due to the downgrade path. The provided sources...

CVE-2025-43408

This CVE affects macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. Root cause: an under‑restricted lock device option allowed a physically present attacker to access contacts from the lock screen. The issue is fixed in the listed updates. Remediation: upgrade to macOS Sonoma 14.8.2...

CVE-2025-43428

CVE-2025-43428 affects Apple platforms (visionOS, iOS, iPadOS, macOS Tahoe) due to a configuration issue that allowed viewing photos in the Hidden Photos Album without authentication. The issue is fixed in visionOS 26.2, iOS 26.2, iPadOS 26.2, and macOS Tahoe 26.2. The Apple security notes enumer...

CVE-2025-43514

CVE-2025-43514 is a macOS Tahoe cache-handling issue that could allow an app to access protected user data. The vulnerability is addressed in macOS Tahoe 26.2; affected systems running Tahoe prior to 26.2 are impacted. Apple’s security content notes this under macOS Tahoe 26.2 with the fix descri...

CVE-2025-43521

CVE-2025-43521 describes a downgrade issue affecting Intel-based Macs that was mitigated by adding code-signing restrictions. The issue could allow an app to access sensitive user data, and the vulnerability is fixed in macOS Tahoe 26.2 and macOS Sequoia 15.7.3. Public references in the connected...

CVE-2025-43522

CVE-2025-43522 is a downgrade issue affecting Intel-based Mac computers. The vulnerability arises in macOS with a downgrade path that was addressed by adding code‑signing restrictions, and is fixed in macOS Tahoe 26.2 and macOS Sequoia 15.7.3. An app may be able to access user‑sensitive data due ...

CVE-2025-43523

CVE-2025-43523 affects macOS Tahoe 26.2 and macOS Sequoia 15.7.3. The issue is described as a permissions problem that could allow an app to access sensitive user data. Apple and related advisories indicate the vulnerability has been addressed by additional restrictions and releases in the affect...

CVE-2025-43539

CVE-2025-43539 affects Apple operating systems and components where processing a file may cause memory corruption due to insufficient bounds checks. Affected products include watchOS (26.2), macOS Sonoma (14.8.3), macOS Tahoe (26.2), macOS Sequoia (15.7.3), iOS (18.7.3 and 26.2), iPadOS (18.7.3 a...

CVE-2025-46302

CVE-2025-46302: Apple fixed an issue causing a malicious HID device to trigger an unexpected process crash by addressing bounds-check vulnerabilities. Affected products/versions include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe ...

CVE-2025-31272

CVE-2025-31272 affects macOS Sequoia (initially reported as a bypass of launch-constraint protections). The issue enables an app to bypass launch constraints and execute malicious code with elevated privileges. It is fixed in macOS Sequoia 15.4. Affected versions prior to Sequoia 15.4 are address...

CVE-2025-43206

CVE-2025-43206 describes a local path traversal in macOS where directory-path parsing lacked sufficient validation. Fixed in macOS updates: Sequoia 15.6, Ventura 13.7.7, and Sonoma 14.7.7. The issue could let an app access protected user data due to improved path validation. The CVSS v3.1 base sc...

CVE-2025-43235

CVE-2025-43235 affects macOS Sequoia; the issue stems from memory handling and can allow an app to cause a denial-of-service. It is fixed in macOS Sequoia 15.6. No exploitation details are provided in the connected documents; remediation is to upgrade to Sequoia 15.6 or later.

CVE-2025-43383

CVE-2025-43383 is an out-of-bounds access issue resolved by improved bounds checking. Affected products/versions include tvOS 26.1, macOS Tahoe 26.1, iOS 26.1/iPadOS 26.1, iOS 18.7.2/iPadOS 18.7.2, macOS Sequoia 15.7.2, and visionOS 26.1. According to the sources, processing a maliciously crafted...

CVE-2025-43397

CVE-2025-43397 is a local-permissions issue affecting Apple macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The underlying problem is described as a permissions issue that was addressed by removing vulnerable code, with the consequence that an app may be able to cause a denial-of...

CVE-2025-43399

CVE-2025-43399 affects Apple platforms (iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1). The issue stems from improved redaction of sensitive information, with the fix shipped in the listed updates. Impact per provided sources: an app may be able to access protected user data. ...

CVE-2025-43401

CVE-2025-43401 is a denial-of-service vulnerability in macOS components that Apple has patched. Affected products include macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue is tied to improved validation in CoreAnimation, with exploitation described as a remote attacker po...

CVE-2025-43448

CVE-2025-43448 is an Apple OS vulnerability where an app could break out of its sandbox due to insufficient validation of symlinks. It is addressed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, tvOS 26.1, watchOS 26.1, and ...

CVE-2025-43497

The CVE-2025-43497 entry describes an access issue in macOS Tahoe 26.1 where an application may be able to break out of its sandbox due to insufficient sandbox restrictions. The issue is fixed in macOS Tahoe 26.1. The vulnerability is described with a LOCAL attack vector, LOW privileges, and no u...

CVE-2025-43513

CVE-2025-43513 is a permissions issue in macOS that allowed an app to read sensitive location information. It is fixed by removing the vulnerable code in macOS Tahoe 26.2, macOS Sequoia 15.7.3, and macOS Sonoma 14.8.3. The issue affects the MDM Configuration Tools component; the fixes are include...

CVE-2025-43518

CVE-2025-43518 is a logic-issue vulnerability fixed in multiple Apple platforms. The flaw allows an app to potentially inappropriately access files via the spellcheck API. Affected products include watchOS 26.2; macOS Sonoma 14.8.3; macOS Tahoe 26.2; iOS 26.2 and iPadOS 26.2; macOS Sequoia 15.7.3...

CVE-2025-43532

The CVE-2025-43532 issue is a memory corruption vulnerability addressed by Apple in multiple OS updates. Affected components: memory handling in several Apple platforms (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) with underlying bounds-check improvements. Fixed in iOS 18.7.3 / iPadOS 18.7.3, iOS...

CVE-2025-43538

CVE-2025-43538 is a “logging issue” in Apple platforms that could allow an app to access sensitive user data. The connected sources specify concrete fixes across multiple Apple OSes: watchOS 26.2; macOS Sonoma 14.8.3; iOS 18.7.3 and iOS 26.2; iPadOS 18.7.3 and 26.2; macOS Tahoe 26.2; and visionOS...

CVE-2025-46300

The CVE-2025-46300 issue is mitigated by Apple via updated bounds checks and affects multiple Apple OS releases. Affected components include HID handling that could cause an unexpected process crash when a malicious HID device is connected. Fixed in iOS/iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2; ma...

CVE-2025-43257

CVE-2025-43257 affects macOS Sequoia (15.6) with a vulnerability in how symlinks are handled that could allow an app to break out of its sandbox. The issue is fixed in macOS Sequoia 15.6. Other connected sources corroborate a sandbox bypass under macOS Sequoia, but exploitation details are not pr...

CVE-2025-43351

CVE-2025-43351 concerns a permissions issue in macOS Tahoe that could allow an app to access protected user data in a local environment. The vulnerability stems from insufficient restrictions in privilege checking logic, and Apple fixed it in macOS Tahoe 26.1 (security content notes list Admin Fr...

CVE-2025-43402

CVE-2025-43402 affects macOS Tahoe prior to version 26.1, with a memory mishandling flaw that can cause an app to terminate the system or corrupt process memory. Apple notes the fix is in macOS Tahoe 26.1. Connected feeds (CNVD, RH, NVD, etc.) consistently describe memory handling improvements as...

CVE-2025-43404

CVE-2025-43404 is a permissions/sandbox issue in macOS Tahoe that allowed an app to access sensitive user data due to insufficient sandbox restrictions. Multiple sources (NVD, Red Hat, CNVD, RH, etc.) describe a vulnerability resolved in macOS Tahoe 26.1 with the sandbox tightened. The NVD entry ...

CVE-2025-43467

CVE-2025-43467 affects macOS Tahoe prior to 26.1. The vulnerability is an undercheck flaw that could allow an unprivileged app to gain root privileges via local access. Apple’s security content notes the fix is in macOS Tahoe 26.1 with improved checks; Red Hat/NVD entries corroborate a root-privi...

CVE-2025-43215

CVE-2025-43215 affects macOS Sequoia; the issue involves processing of malicious images that could disclose process memory. It is fixed in macOS Sequoia 15.6 via improved checks. Practical impact is memory disclosure when handling crafted images. Remediation: update to macOS Sequoia 15.6 or later...

CVE-2025-43278

CVE-2025-43278 affects macOS Sequoia prior to 15.4; the issue arises from improper handling of symlinks and is addressed in macOS Sequoia 15.4. The description notes that an app may be able to access protected user data due to this flaw. According to the connected sources, the vulnerability is mi...

CVE-2025-43379

CVE-2025-43379 arises from insufficient validation of symlinks in Apple OS components. Affected products include tvOS, watchOS, macOS (Tahoe 26.1; Sequoia 15.7.2; Sonoma 14.8.2), iOS/iPadOS (26.1) and visionOS 26.1. The issue may allow an app to access protected user data due to improper symlink ...

CVE-2025-43393

CVE-2025-43393 affects macOS Tahoe prior to 26.1 where an app may break out of its sandbox (local, low-privilege risk). The issue is addressed in macOS Tahoe 26.1 with extra sandbox restrictions. References from NVD/Red Hat/CVE listings corroborate a sandbox/permissions regression fixed by Apple ...

CVE-2025-43409

CVE-2025-43409 is a permissions/sandbox issue in macOS Sequoia and macOS Tahoe. Affected: macOS Sequoia (15.7.x) and macOS Tahoe (26.x). Description: an app may be able to access sensitive user data due to insufficient sandbox/validation checks. Root cause: permissions-related vulnerability with ...

CVE-2025-43414

CVE-2025-43414 describes a permissions issue in macOS Shortcuts where an attacker could access files normally inaccessible to the Shortcuts app. The Red Hat/NVD entries confirm the root cause as improved validation, with fixes in macOS Sequoia 15.7.2, macOS Tahoe 26.1, and macOS Sonoma 14.8.2. Th...

CVE-2025-43465

CVE-2025-43465 affects macOS Tahoe prior to 26.1, where a directory-path parsing flaw could allow an app to access sensitive user data. The issue was fixed in macOS Tahoe 26.1 via improved path validation. Remediation: update to macOS 26.1.

CVE-2025-43471

CVE-2025-43471 affects macOS Tahoe before 26.1, with the issue described as an access to sensitive user data due to insufficient or improved checks. Apple’s security content for macOS Tahoe 26.1 attributes the fix to the Admin Framework and states: “The issue was addressed with improved checks” a...

CVE-2025-46281

CVE-2025-46281 involves a logic issue that could allow an app to break out of its sandbox on macOS Tahoe. The vulnerability is fixed in macOS Tahoe 26.2. Affected component details are centered on sandbox checks; Apple’s advisory and Red Hat/NVD references reiterate the same sandbox-bypass risk w...

CVE-2025-46297

CVE-2025-46297 describes a permissions issue in macOS Tahoe up to 26.1 that could allow an app to access protected files inside an App Sandbox container. The Red Hat and EUVD entries reiterate the same underlying problem. Apple’s security content indicates the fix is in macOS Tahoe 26.2, addressi...