Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Total 13013 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-43425 1 Apple 6 Ipados, Iphone Os, Safari and 3 more 2025-11-05 N/A 4.3 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43420 1 Apple 1 Macos 2025-11-05 N/A 4.7 MEDIUM
A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data.
CVE-2025-43414 1 Apple 1 Macos 2025-11-05 N/A 6.2 MEDIUM
A permissions issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.
CVE-2025-43462 1 Apple 5 Ipados, Iphone Os, Tvos and 2 more 2025-11-05 N/A 7.5 HIGH
The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1, visionOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2025-43336 1 Apple 1 Macos 2025-11-05 N/A 4.4 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app with root privileges may be able to access private information.
CVE-2025-43335 1 Apple 1 Macos 2025-11-05 N/A 5.5 MEDIUM
The issue was addressed by adding additional logic. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access user-sensitive data.
CVE-2025-43395 1 Apple 1 Macos 2025-11-05 N/A 3.3 LOW
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access protected user data.
CVE-2025-43407 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2025-11-05 N/A 7.8 HIGH
This issue was addressed with improved entitlements. This issue is fixed in visionOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1, tvOS 26.1. An app may be able to break out of its sandbox.
CVE-2025-43476 1 Apple 1 Macos 2025-11-05 N/A 7.8 HIGH
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to break out of its sandbox.
CVE-2025-43432 1 Apple 6 Ipados, Iphone Os, Safari and 3 more 2025-11-05 N/A 4.3 MEDIUM
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43400 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2025-11-04 N/A 6.3 MEDIUM
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
CVE-2025-43368 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2025-11-04 N/A 4.3 MEDIUM
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43356 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2025-11-04 N/A 6.5 MEDIUM
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. A website may be able to access sensor information without user consent.
CVE-2025-43272 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2025-11-04 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43265 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2025-11-04 N/A 4.0 MEDIUM
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-43240 1 Apple 2 Macos, Safari 2025-11-04 N/A 6.2 MEDIUM
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated.
CVE-2025-43228 1 Apple 3 Ipados, Iphone Os, Safari 2025-11-04 N/A 4.3 MEDIUM
The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6, Safari 18. 6. Visiting a malicious website may lead to address bar spoofing.
CVE-2025-43227 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2025-11-04 N/A 7.5 HIGH
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2025-43216 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2025-11-04 N/A 6.5 MEDIUM
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, watchOS 11.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, tvOS 18.6, macOS Sequoia 15.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43212 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2025-11-04 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.