CVE Intelligence

Apple Macos vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apple Macos: 1087 record(s), with affected versions and fixes.
cpe:2.3:o:apple:macos

CVE-2025-43531 Low · 3.1 CWE-362 Dec 17, 2025
Race Condition in Apple Safari
A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43529 High · 8.8 KEV High · 61 Public exploit CWE-416 Dec 17, 2025
Apple Multiple Products Use-After-Free WebKit Vulnerability
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.
CVE-2025-43514 Medium · 5.5 CWE-200 Dec 17, 2025
Exposure of Sensitive Information in Apple Macos
The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-43501 Medium · 4.3 CWE-787 Dec 17, 2025
Out-of-bounds Write in Apple Safari
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43428 Critical · 9.8 CWE-306 Dec 17, 2025
Missing Authentication for Critical Function in Apple Ipados
A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Photos in the Hidden Photos Album may be viewed without authentication.
CVE-2025-46289 Medium · 5.5 CWE-285 Dec 12, 2025
Improper Authorization in Apple Macos
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-46287 Medium · 6.5 CWE-451 Dec 12, 2025
An inconsistent user interface issue was addressed with improved state management. This…
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An attacker may be able to spoof their FaceTime caller ID.
CVE-2025-46285 High · 7.8 CWE-190 Dec 12, 2025
Integer Overflow or Wraparound in Apple Macos
An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.
CVE-2025-46276 Medium · 5.5 Dec 12, 2025
An information disclosure issue was addressed with improved privacy controls. This issue…
An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.
CVE-2025-43542 High · 7.5 CWE-200 Dec 12, 2025
Exposure of Sensitive Information in Apple Macos
This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime.
CVE-2025-43539 High · 8.8 CWE-787 Dec 12, 2025
Out-of-bounds Write in Apple Macos
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption.
CVE-2025-43538 Medium · 5.5 CWE-200 Dec 12, 2025
Exposure of Sensitive Information in Apple Macos
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.
CVE-2025-43532 Low · 2.8 CWE-120 Dec 12, 2025
Classic Buffer Overflow in Apple Macos
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing malicious data may lead to unexpected app termination.
CVE-2025-43530 Medium · 5.5 CWE-200 Dec 12, 2025
Exposure of Sensitive Information in Apple Macos
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-43527 High · 7.8 CWE-280 Dec 12, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in…
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to gain root privileges.
CVE-2025-43523 Medium · 5.5 CWE-200 Dec 12, 2025
Exposure of Sensitive Information in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-43522 Low · 3.3 CWE-347 Dec 12, 2025
Improper Verification of Cryptographic Signature in Apple Macos
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access user-sensitive data.
CVE-2025-43521 Medium · 5.5 CWE-347 Dec 12, 2025
Improper Verification of Cryptographic Signature in Apple Macos
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-43519 Medium · 5.5 CWE-276 Dec 12, 2025
Incorrect Default Permissions in Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-43518 Low · 3.3 CWE-284 Dec 12, 2025
Improper Access Control in Apple Macos
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API.
CVE-2025-43517 Low · 3.3 CWE-532 Dec 12, 2025
Insertion of Sensitive Information into Log File in Apple Macos
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-43516 Low · 3.3 CWE-384 Dec 12, 2025
Session Fixation in Apple Macos
A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with Voice Control enabled may be able to transcribe another user's activity.
CVE-2025-43513 Medium · 5.5 CWE-284 Dec 12, 2025
Improper Access Control in Apple Macos
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to read sensitive location information.
CVE-2025-43512 High · 7.8 CWE-269 Dec 12, 2025
Improper Privilege Management in Apple Macos
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to elevate privileges.
CVE-2025-43511 Medium · 6.5 CWE-416 Dec 12, 2025
Use After Free in Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.