Vulnerabilidades do Apple Macos

CVE-2025-43466 Média · 5.5 CWE-95 12/12/2025

Eval Injection em Apple Macos

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43465 Média · 5.5 CWE-22 12/12/2025

Path Traversal em Apple Macos

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43464 Média · 6.5 CWE-20 12/12/2025

Improper Input Validation em Apple Macos

A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may lead to an app denial-of-service.

CVE-2025-43463 Média · 5.5 CWE-22 12/12/2025

Path Traversal em Apple Macos

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43461 Média · 5.5 CWE-59 12/12/2025

Link Following em Apple Macos

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.

CVE-2025-43416 Média · 5.5 CWE-284 12/12/2025

Improper Access Control em Apple Macos

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.

CVE-2025-43410 Baixa · 2.4 CWE-524 12/12/2025

The issue was addressed with improved handling of caches. This issue is fixed in macOS…

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes.

CVE-2025-43406 Média · 5.5 CWE-497 12/12/2025

A logic issue was addressed with improved restrictions. This issue is fixed in macOS…

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43404 Baixa · 3.3 CWE-284 12/12/2025

Improper Access Control em Apple Macos

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43402 Alta · 7.8 CWE-787 12/12/2025

Out-of-bounds Write em Apple Macos

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt process memory.

CVE-2025-43393 Média · 5.2 CWE-284 12/12/2025

Improper Access Control em Apple Macos

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to break out of its sandbox.

CVE-2025-43388 Média · 5.5 CWE-95 12/12/2025

Eval Injection em Apple Macos

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43381 Média · 5.5 CWE-59 12/12/2025

Link Following em Apple Macos

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data.

CVE-2025-43351 Média · 5.5 CWE-284 12/12/2025

Improper Access Control em Apple Macos

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.

CVE-2025-43320 Alta · 7.8 CWE-269 12/12/2025

Improper Privilege Management em Apple Macos

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.

CVE-2025-14174 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/12/2025

Google Chromium Out of Bounds Memory Access Vulnerability

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVE-2025-43374 Média · 4.3 CWE-121 21/11/2025

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS...

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.

CVE-2025-31266 Média · 4.3 CWE-451 21/11/2025

A spoofing issue was addressed with improved truncation when displaying the fully qualified...

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

CVE-2025-31248 Média · 5.5 CWE-22 21/11/2025

Path Traversal em Apple Macos

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data.

CVE-2025-43205 Média · 4.0 CWE-125 11/11/2025

Out-of-bounds Read em Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to bypass ASLR.

CVE-2023-43000 Alta · 8.8 KEV Alta · 55 CWE-416 05/11/2025

Apple Multiple products Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

CVE-2025-43507 Média · 6.5 CWE-276 03/11/2025

Incorrect Default Permissions em Apple Ipados

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.

CVE-2025-43503 Média · 4.3 CWE-290 03/11/2025

Authentication Bypass by Spoofing em Apple Safari

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Visiting a malicious website may lead to user interface spoofing.

CVE-2025-43502 Alta · 7.5 CWE-284 03/11/2025

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.1 and...

A privacy issue was addressed by removing sensitive data. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. An app may be able to bypass certain Privacy preferences.

CVE-2025-43500 Alta · 7.5 CWE-359 03/11/2025

A privacy issue was addressed with improved handling of user preferences. This issue is…

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access sensitive user data.