Apple vulnerabilities
Published CVEs affecting Apple products: 1243 record(s), with severity, exploitation and fixes.
Macos 1087Iphone Os 692iOS and iPadOS 690Ipados 671Visionos 463Watchos 433Tvos 398Safari 181Mac Os X 57iOS 18Xcode 14Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1
CVE-2023-43000
High · 8.8
KEV High · 55 CWE-416 Nov 5, 2025
Apple Multiple products Use-After-Free Vulnerability
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43507
Medium · 6.5
CWE-276 Nov 3, 2025
Incorrect Default Permissions in Apple Ipados
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.
CVE-2025-43505
High · 8.8
CWE-787 Nov 3, 2025
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption.
CVE-2025-43504
Medium · 4.9
CWE-119 Nov 3, 2025
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1....
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service.
CVE-2025-43503
Medium · 4.3
CWE-290 Nov 3, 2025
Authentication Bypass by Spoofing in Apple Safari
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Visiting a malicious website may lead to user interface spoofing.
CVE-2025-43502
High · 7.5
CWE-284 Nov 3, 2025
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.1 and...
A privacy issue was addressed by removing sensitive data. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. An app may be able to bypass certain Privacy preferences.
CVE-2025-43500
High · 7.5
CWE-359 Nov 3, 2025
A privacy issue was addressed with improved handling of user preferences. This issue is…
A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access sensitive user data.
CVE-2025-43499
Medium · 5.5
CWE-284 Nov 3, 2025
Improper Access Control in Apple Macos
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-43498
Medium · 5.5
CWE-284 Nov 3, 2025
An authorization issue was addressed with improved state management. This issue is fixed in iOS...
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data.
CVE-2025-43496
High · 7.5
CWE-359 Nov 3, 2025
The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2…
The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.
CVE-2025-43495
Medium · 5.4
CWE-200 Nov 3, 2025
Exposure of Sensitive Information in Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission.
CVE-2025-43493
Medium · 4.3
CWE-290 Nov 3, 2025
Authentication Bypass by Spoofing in Apple Safari
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.
CVE-2025-43481
Medium · 5.2
CWE-284 Nov 3, 2025
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2. An...
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox.
CVE-2025-43480
High · 8.1
CWE-942 Nov 3, 2025
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, visionOS 26.1,...
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.
CVE-2025-43479
Medium · 5.5
CWE-200 Nov 3, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-43478
Medium · 5.5
CWE-416 Nov 3, 2025
A use after free issue was addressed with improved memory management. This issue is fixed in...
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination.
CVE-2025-43477
Medium · 5.5
CWE-284 Nov 3, 2025
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-43476
High · 7.8
CWE-284 Nov 3, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox.
CVE-2025-43474
High · 7.8
CWE-125 Nov 3, 2025
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2025-43472
High · 7.8
CWE-20 Nov 3, 2025
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS...
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to gain root privileges.
CVE-2025-43469
Medium · 5.5
CWE-359 Nov 3, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-43468
Medium · 5.5
CWE-347 Nov 3, 2025
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing...
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-43462
High · 7.5
CWE-400 Nov 3, 2025
The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS...
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2025-43460
Medium · 4.6
CWE-200 Nov 3, 2025
Exposure of Sensitive Information in Apple Ipados
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2025-43459
Medium · 4.6
CWE-863 Nov 3, 2025
An authentication issue was addressed with improved state management. This issue is fixed in...
An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple Watch may be able to view Live Voicemail.