Apple Iphone Os vulnerabilities

CVE-2025-43498 Medium · 5.5 CWE-284 Nov 3, 2025

An authorization issue was addressed with improved state management. This issue is fixed in iOS...

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data.

CVE-2025-43496 High · 7.5 CWE-359 Nov 3, 2025

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2…

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.

CVE-2025-43495 Medium · 5.4 CWE-200 Nov 3, 2025

Exposure of Sensitive Information in Apple Ipados

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission.

CVE-2025-43493 Medium · 4.3 CWE-290 Nov 3, 2025

Authentication Bypass by Spoofing in Apple Safari

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.

CVE-2025-43480 High · 8.1 CWE-942 Nov 3, 2025

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, visionOS 26.1,...

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

CVE-2025-43462 High · 7.5 CWE-400 Nov 3, 2025

The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS...

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2025-43460 Medium · 4.6 CWE-200 Nov 3, 2025

Exposure of Sensitive Information in Apple Ipados

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information.

CVE-2025-43458 Medium · 4.3 CWE-20 Nov 3, 2025

Improper Input Validation in Apple Safari

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43457 Medium · 6.5 CWE-416 Nov 3, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in...

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2025-43455 Medium · 5.5 CWE-200 Nov 3, 2025

A privacy issue was addressed with improved checks. This issue is fixed in watchOS 26.1, iOS 26.1...

A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views.

CVE-2025-43454 High · 7.5 CWE-284 Nov 3, 2025

Improper Access Control in Apple Ipados

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. A device may persistently fail to lock.

CVE-2025-43452 Medium · 4.6 CWE-359 Nov 3, 2025

This issue was addressed by restricting options offered on a locked device. This issue…

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen.

CVE-2025-43450 High · 7.5 CWE-284 Nov 3, 2025

Improper Access Control in Apple Ipados

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn information about the current camera view before being granted camera access.

CVE-2025-43449 High · 7.5 CWE-200 Nov 3, 2025

Exposure of Sensitive Information in Apple Ipados

The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs.

CVE-2025-43448 Medium · 6.3 CWE-59 Nov 3, 2025

Link Following in Apple Ipados

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox.

CVE-2025-43447 Medium · 5.5 CWE-787 Nov 3, 2025

The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS...

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2025-43445 Medium · 4.3 CWE-125 Nov 3, 2025

Out-of-bounds Read in Apple Ipados

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43444 Medium · 5.3 CWE-276 Nov 3, 2025

Incorrect Default Permissions in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.

CVE-2025-43443 Medium · 4.3 Nov 3, 2025

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS…

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43442 Low · 3.3 CWE-276 Nov 3, 2025

Incorrect Default Permissions in Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed.

CVE-2025-43441 Medium · 4.3 CWE-119 Nov 3, 2025

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43440 Medium · 6.5 CWE-79 Nov 3, 2025

This issue was addressed with improved checks This issue is fixed in Safari 26.1, visionOS 26.1,...

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43439 Medium · 5.5 CWE-359 Nov 3, 2025

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS…

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.

CVE-2025-43438 Medium · 4.3 CWE-416 Nov 3, 2025

Use After Free in Apple Safari

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2025-43436 High · 7.5 CWE-288 Nov 3, 2025

A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26...

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps.