Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,404

Export CSV
CVE-2025-24086

Improved Memory Handling Causes Denial of Service in Image Processing

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing an image may lead to a denial-of-service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 3 more
CVE-2025-24107

Permission Misconfiguration Lets Malicious App Gain Root Privileges on Apple Devices

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3. A malicious app may be able to gain root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 2 more
CVE-2025-30465

Shortcuts App Permission Escalation Allowing Unauthorized File Access

A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Apple
Products
Ipados Macos
CVE-2025-31184

Unauthorized Local Network Access via Improper Permission Checks in Apple Safari and Operating Systems

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 2 more
CVE-2025-30428

Hidden Photos Album Unauthorized Access in iOS and iPadOS

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os
CVE-2025-24095

App Bypass of Privacy Preferences via Missing Entitlement Checks

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privacy preferences.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Visionos
CVE-2025-24173

Sandbox Escape via Missing Entitlement Checks

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 2 more
CVE-2025-24221

Unrestricted Access to Keychain Data via iOS Backup

This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Visionos
CVE-2025-24210

Logic Error in Image Parsing Leads to User Information Disclosure

A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an image may lead to disclosure of user information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 2 more
CVE-2025-30434

Cross‑Site Scripting via Malicious File Processing in iOS 18 and iPadOS 18

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os
CVE-2025-30439

Physical Access Information Disclosure on Apple Devices

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An attacker with physical access to a locked device may be able to view sensitive user information.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 1 more
CVE-2025-30454

Path Handling Issue Allowing Malicious App to Access Private Information

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. A malicious app may be able to access private information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 1 more
CVE-2025-31183

Unrestricted Data Container Access Allowing App to Read Sensitive User Data

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 1 more
CVE-2025-24212

Sandbox Escape via App in Apple Operating Systems

This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 2 more
CVE-2025-24198

Siri Authorization Bypass on Locked Devices with Physical Access

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos
CVE-2025-24205

Authorization flaw enabling unauthorized access to user sensitive data on Apple iOS, iPadOS, macOS systems

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos
CVE-2025-24182

Out‑of‑Bounds Read in Font Processing Allows Process Memory Disclosure

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 1 more
CVE-2025-30430

Authentication bypass allowing password autofill after failed login

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Password autofill may fill in passwords after failing authentication.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 1 more
CVE-2025-30426

Application Install Enumeration via Missing Entitlement Checks

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to enumerate a user's installed apps.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 2 more
CVE-2025-24097

Apple OS Permission Flaw Allows Arbitrary File Metadata Disclosure

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Ipados Iphone Os Macos and 1 more