Apple vulnerabilities
Published CVEs affecting Apple products: 1243 record(s), with severity, exploitation and fixes.
Macos 1087Iphone Os 692iOS and iPadOS 690Ipados 671Visionos 463Watchos 433Tvos 398Safari 181Mac Os X 57iOS 18Xcode 14Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1
CVE-2025-43458
Medium · 4.3
CWE-20 Nov 3, 2025
Improper Input Validation in Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43457
Medium · 6.5
CWE-416 Nov 3, 2025
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43455
Medium · 5.5
CWE-200 Nov 3, 2025
A privacy issue was addressed with improved checks. This issue is fixed in watchOS 26.1, iOS 26.1...
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views.
CVE-2025-43454
High · 7.5
CWE-284 Nov 3, 2025
Improper Access Control in Apple Ipados
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. A device may persistently fail to lock.
CVE-2025-43452
Medium · 4.6
CWE-359 Nov 3, 2025
This issue was addressed by restricting options offered on a locked device. This issue…
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen.
CVE-2025-43450
High · 7.5
CWE-284 Nov 3, 2025
Improper Access Control in Apple Ipados
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn information about the current camera view before being granted camera access.
CVE-2025-43449
High · 7.5
CWE-200 Nov 3, 2025
Exposure of Sensitive Information in Apple Ipados
The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs.
CVE-2025-43448
Medium · 6.3
CWE-59 Nov 3, 2025
Link Following in Apple Ipados
This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox.
CVE-2025-43447
Medium · 5.5
CWE-787 Nov 3, 2025
The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS...
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2025-43446
Medium · 5.5
CWE-59 Nov 3, 2025
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to modify protected parts of the file system.
CVE-2025-43445
Medium · 4.3
CWE-125 Nov 3, 2025
Out-of-bounds Read in Apple Ipados
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVE-2025-43444
Medium · 5.3
CWE-276 Nov 3, 2025
Incorrect Default Permissions in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.
CVE-2025-43443
Medium · 4.3
Nov 3, 2025
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS…
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43442
Low · 3.3
CWE-276 Nov 3, 2025
Incorrect Default Permissions in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed.
CVE-2025-43441
Medium · 4.3
CWE-119 Nov 3, 2025
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43440
Medium · 6.5
CWE-79 Nov 3, 2025
This issue was addressed with improved checks This issue is fixed in Safari 26.1, visionOS 26.1,...
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43439
Medium · 5.5
CWE-359 Nov 3, 2025
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS…
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.
CVE-2025-43438
Medium · 4.3
CWE-416 Nov 3, 2025
Use After Free in Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43436
High · 7.5
CWE-288 Nov 3, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26...
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps.
CVE-2025-43435
Medium · 4.3
CWE-119 Nov 3, 2025
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43434
Medium · 4.3
CWE-416 Nov 3, 2025
Use After Free in Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43433
High · 8.8
CWE-787 Nov 3, 2025
Out-of-bounds Write in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43432
Medium · 4.3
CWE-416 Nov 3, 2025
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43431
High · 8.8
CWE-787 Nov 3, 2025
Out-of-bounds Write in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43430
Medium · 4.3
CWE-20 Nov 3, 2025
Improper Input Validation in Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.