Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 180

Export CSV
CVE-2025-43233

Unauthorized HTTPS Proxy Interception Leading to Data Disclosure

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43197

macOS Entitlement Check Bypass Permits Unauthorized Access to Sensitive User Data

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43237

macOS Out‑of‑Bounds Write Causes Unexpected System Termination

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6. An app may be able to cause unexpected system termination.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia
CVE-2025-43187

Arbitrary Code Execution via hdiutil Command

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43302

Out‑of‑Bounds Write Causing Application or System Termination in Apple Operating Systems

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ios Ios And Ipados Ipados and 8 more
CVE-2025-43345

Apple OS Data Disclosure via Improper Access

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ios Ipad Os Ipados and 7 more
CVE-2025-43373

Kernel Memory Corruption that Causes System Termination in macOS

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma
CVE-2025-43482

macOS Input Validation Vulnerability Causing Denial of Service

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma
CVE-2025-43274

Sandbox Escalation via Unprotected Sensitive Data in macOS

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia
CVE-2025-31279

Permissions‑Based User Fingerprinting Vulnerability in Apple iPadOS and macOS

A permissions issue was addressed with additional restrictions. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Apple
Products
Ipados Macos Macos Sequoia and 2 more
CVE-2025-43215

Image Processing Memory Disclosure in macOS

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may result in disclosure of process memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia
CVE-2025-31243

Permissions flaw enabling root privilege escalation in macOS

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43244

Race Condition in macOS Causes Unexpected System Termination

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43209

Out‑of‑Bounds Access in Safari Rendering Engine Leading to Crash

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Apple
Products
Ios Ipados Iphone Os and 7 more
CVE-2025-43249

Root Privilege Escalation via Improper Logic Checks in Apple macOS

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43195

Environment Variable Validation Flaw Allows Sensitive Data Exposure

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma and 1 more
CVE-2025-43226

Out‑of‑Bounds Image Read Leading to Memory Disclosure

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted image may result in disclosure of process memory.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ios Ipados Iphone Os and 6 more
CVE-2025-43230

Imprecise Access Control Allows Sensitive Data Disclosure on Apple Operating Systems

The issue was addressed with additional permissions checks. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to access user-sensitive data.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ios Ipados Iphone Os and 5 more
CVE-2025-43260

Privileged App Entitlement Hijacking in macOS

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to hijack entitlements granted to other privileged apps.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia Macos Sonoma
CVE-2025-43218

Out‑of‑Bounds Read in macOS from Malicious USD Files

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted USD file may disclose memory contents.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos Macos Sequoia