Apple Macos vulnerabilities

CVE-2025-43385 Medium · 4.3 CWE-125 Nov 3, 2025

Out-of-bounds Read in Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43384 Medium · 4.3 CWE-125 Nov 3, 2025

Out-of-bounds Read in Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43383 Medium · 4.3 CWE-125 Nov 3, 2025

Out-of-bounds Read in Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43382 Medium · 5.5 CWE-22 Nov 3, 2025

A parsing issue in the handling of directory paths was addressed with improved path validation....

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43380 Medium · 5.5 CWE-787 Nov 3, 2025

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. Parsing a file may lead to an unexpected app termination.

CVE-2025-43379 Medium · 5.5 CWE-59 Nov 3, 2025

This issue was addressed with improved validation of symlinks. This issue is fixed in visionOS 26...

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data.

CVE-2025-43378 Medium · 5.5 CWE-200 Nov 3, 2025

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43377 Medium · 5.5 CWE-125 Nov 3, 2025

Out-of-bounds Read in Apple Macos

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service.

CVE-2025-43376 High · 7.5 Nov 3, 2025

A logic issue was addressed with improved state management. This issue is fixed in Safari 26,...

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.

CVE-2025-43373 High · 7.5 CWE-119 Nov 3, 2025

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.2...

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2025-43364 High · 7.8 CWE-362 Nov 3, 2025

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26.1. An app may be able to break out of its sandbox.

CVE-2025-43361 High · 7.8 CWE-125 Nov 3, 2025

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 26...

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory.

CVE-2025-43348 Medium · 5.5 CWE-20 Nov 3, 2025

A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.2,...

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may bypass Gatekeeper checks.

CVE-2025-43345 Medium · 5.5 CWE-200 Nov 3, 2025

A correctness issue was addressed with improved checks. This issue is fixed in tvOS 26, watchOS...

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.

CVE-2025-43338 High · 7.1 CWE-79 Nov 3, 2025

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43336 Medium · 4.4 CWE-863 Nov 3, 2025

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.

CVE-2025-43335 Medium · 5.5 CWE-284 Nov 3, 2025

The issue was addressed by adding additional logic. This issue is fixed in macOS Sonoma 14.8.2,...

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

CVE-2025-43334 Medium · 5.5 CWE-284 Nov 3, 2025

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma...

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

CVE-2025-43323 High · 8.1 CWE-200 Nov 3, 2025

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 26,...

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user.

CVE-2025-43322 Medium · 5.5 CWE-284 Nov 3, 2025

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.2,...

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

CVE-2025-43288 Medium · 5.5 CWE-59 Nov 3, 2025

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to bypass Privacy preferences.

CVE-2025-43282 Medium · 5.5 CWE-415 Oct 15, 2025

A double free issue was addressed with improved memory management. This issue is fixed in macOS...

A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to cause unexpected system termination.

CVE-2025-43313 Medium · 5.5 CWE-284 Oct 15, 2025

Improper Access Control in Apple Macos

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVE-2025-43281 High · 7.8 CWE-287 Oct 15, 2025

Improper Authentication in Apple Macos

The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be able to elevate their privileges.

CVE-2025-43296 Medium · 5.5 CWE-352 Oct 9, 2025

Cross-Site Request Forgery (CSRF) in Apple Macos

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.