Apple Macos vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apple Macos: 1087 record(s), with affected versions and fixes.cpe:2.3:o:apple:macos
CVE-2025-46300
Medium · 5.7
CWE-119 Feb 11, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.
CVE-2025-46290
High · 7.5
CWE-693 Feb 11, 2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and…
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. A remote attacker may be able to cause a denial-of-service.
CVE-2025-43417
Medium · 5.5
CWE-22 Feb 11, 2026
Path Traversal in Apple Macos
A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access user-sensitive data.
CVE-2025-43403
Medium · 5.5
CWE-285 Feb 11, 2026
Improper Authorization in Apple Macos
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An app may be able to access sensitive user data.
CVE-2025-46316
Medium · 4.3
CWE-125 Jan 28, 2026
Out-of-bounds Read in Apple Pages
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.
CVE-2025-46306
Medium · 5.5
CWE-125 Jan 28, 2026
Out-of-bounds Read in Apple Keynote
The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing a maliciously crafted Keynote file may disclose memory contents.
CVE-2025-43508
Medium · 5.5
CWE-532 Jan 16, 2026
Insertion of Sensitive Information into Log File in Apple Macos
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2024-44238
High · 7.8
CWE-119 Jan 16, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be able to corrupt coprocessor memory.
CVE-2024-44210
Low · 3.3
CWE-284 Jan 16, 2026
Improper Access Control in Apple Macos
This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.
CVE-2025-46299
Medium · 4.3
CWE-284 Jan 9, 2026
Improper Access Control in Apple Safari
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-46298
Medium · 6.5
CWE-119 Jan 9, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-46297
Medium · 5.5
CWE-284 Jan 9, 2026
Improper Access Control in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container.
CVE-2025-46291
High · 7.8
CWE-693 Dec 17, 2025
A logic issue was addressed with improved validation. This issue is fixed in macOS…
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.2. An app may bypass Gatekeeper checks.
CVE-2025-46288
Medium · 5.5
CWE-284 Dec 17, 2025
Improper Access Control in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive payment tokens.
CVE-2025-46283
Medium · 5.5
CWE-200 Dec 17, 2025
Exposure of Sensitive Information in Apple Macos
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-46282
Medium · 5.5
CWE-284 Dec 17, 2025
Improper Access Control in Apple Safari
The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-46281
High · 8.8
CWE-693 Dec 17, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia…
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to break out of its sandbox.
CVE-2025-46278
Medium · 5.5
CWE-200 Dec 17, 2025
Exposure of Sensitive Information in Apple Macos
The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-46277
Low · 3.3
CWE-532 Dec 17, 2025
Insertion of Sensitive Information into Log File in Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able to access a user’s Safari history.
CVE-2025-46279
Low · 3.3
CWE-200 Dec 17, 2025
Exposure of Sensitive Information in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed.
CVE-2025-43536
Medium · 4.3
CWE-416 Dec 17, 2025
Use After Free in Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43541
Medium · 4.3
CWE-843 Dec 17, 2025
Type Confusion in Apple Safari
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43535
Medium · 4.3
Dec 17, 2025
The issue was addressed with improved memory handling. This issue is fixed in Safari…
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43533
Medium · 5.7
CWE-20 Dec 17, 2025
Improper Input Validation in Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.
CVE-2025-43526
Critical · 9.8
CWE-601 Dec 17, 2025
Open Redirect in Apple Safari
This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.