Vulnerabilidades do Apple Macos

CVE-2025-43385 Média · 4.3 CWE-125 03/11/2025

Out-of-bounds Read em Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43384 Média · 4.3 CWE-125 03/11/2025

Out-of-bounds Read em Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43383 Média · 4.3 CWE-125 03/11/2025

Out-of-bounds Read em Apple Ipados

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43382 Média · 5.5 CWE-22 03/11/2025

A parsing issue in the handling of directory paths was addressed with improved path validation....

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43380 Média · 5.5 CWE-787 03/11/2025

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. Parsing a file may lead to an unexpected app termination.

CVE-2025-43379 Média · 5.5 CWE-59 03/11/2025

This issue was addressed with improved validation of symlinks. This issue is fixed in visionOS 26...

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data.

CVE-2025-43378 Média · 5.5 CWE-200 03/11/2025

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-43377 Média · 5.5 CWE-125 03/11/2025

Out-of-bounds Read em Apple Macos

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service.

CVE-2025-43376 Alta · 7.5 03/11/2025

A logic issue was addressed with improved state management. This issue is fixed in Safari 26,...

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.

CVE-2025-43373 Alta · 7.5 CWE-119 03/11/2025

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.2...

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2025-43364 Alta · 7.8 CWE-362 03/11/2025

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26.1. An app may be able to break out of its sandbox.

CVE-2025-43361 Alta · 7.8 CWE-125 03/11/2025

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 26...

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory.

CVE-2025-43348 Média · 5.5 CWE-20 03/11/2025

A logic issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.2,...

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may bypass Gatekeeper checks.

CVE-2025-43345 Média · 5.5 CWE-200 03/11/2025

A correctness issue was addressed with improved checks. This issue is fixed in tvOS 26, watchOS...

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.

CVE-2025-43338 Alta · 7.1 CWE-79 03/11/2025

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVE-2025-43336 Média · 4.4 CWE-863 03/11/2025

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app with root privileges may be able to access private information.

CVE-2025-43335 Média · 5.5 CWE-284 03/11/2025

The issue was addressed by adding additional logic. This issue is fixed in macOS Sonoma 14.8.2,...

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

CVE-2025-43334 Média · 5.5 CWE-284 03/11/2025

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma...

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

CVE-2025-43323 Alta · 8.1 CWE-200 03/11/2025

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 26,...

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user.

CVE-2025-43322 Média · 5.5 CWE-284 03/11/2025

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.2,...

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.

CVE-2025-43288 Média · 5.5 CWE-59 03/11/2025

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS...

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to bypass Privacy preferences.

CVE-2025-43282 Média · 5.5 CWE-415 15/10/2025

A double free issue was addressed with improved memory management. This issue is fixed in macOS...

A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to cause unexpected system termination.

CVE-2025-43313 Média · 5.5 CWE-284 15/10/2025

Improper Access Control em Apple Macos

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVE-2025-43281 Alta · 7.8 CWE-287 15/10/2025

Improper Authentication em Apple Macos

The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be able to elevate their privileges.

CVE-2025-43296 Média · 5.5 CWE-352 09/10/2025

Cross-Site Request Forgery (CSRF) em Apple Macos

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.