CVE-2025-31227

Physical-Access Enabled Retrieval of Deleted Call Recordings

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os

CVE-2025-31226

Denial of Service Triggered by Malicious Image Processing on Apple Platforms

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted image may lead to a denial-of-service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os Macos and 3 more

CVE-2025-31251

Memory Corruption from Improper Input Sanitization in Apple Media File Processing

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os Macos and 3 more

CVE-2025-31210

Denial-of-Service Vulnerability in iOS/iPadOS Web Content Processor

The issue was addressed with improved UI. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing web content may lead to a denial-of-service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os

CVE-2025-31217

Unexpected Safari Crash Due to Improper Input Validation

The issue was addressed with improved input validation. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os Macos and 4 more

CVE-2025-24111

Memory Corruption Leading to Unexpected System Termination Across Apple Operating Systems

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to cause unexpected system termination.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os Macos and 3 more

CVE-2025-31199

Logging Vulnerability Exposing Sensitive User Data on Apple Operating Systems

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.8.2, visionOS 2.4. An app may be able to access sensitive user data.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os Macos and 1 more

CVE-2025-43200

Logic Issue in iCloud Photo/Video Processing Leading to Potential Exploitation

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Listed

Vendors

Apple

Products

Ios Ipados Iphone Os and 3 more

CVE-2025-31281

Malicious File Causing App Crash via Input Validation Vulnerability

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination.

CVSS 3.1 · 9.1 Critical EPSS 1.3% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os and 4 more

CVE-2025-43222

Critical Use‑After‑Free Exploitation Causing App Crash in iPadOS and macOS

A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Macos Macos Sequoia and 2 more

CVE-2025-31229

Passcode Exposure via VoiceOver in iOS and iPadOS

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Iphone Os

CVE-2025-43225

Improper Log Redaction Exposes Sensitive User Data

A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ipados Macos Macos Sequoia and 2 more

CVE-2025-43221

Out‑of‑Bounds Access in Media File Processing Causing App Termination or Memory Corruption

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os and 4 more

CVE-2025-43234

Memory Corruption via Malicious Texture Causes App Termination in Multiple Apple Operating Systems

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted texture may lead to unexpected app termination.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os and 5 more

CVE-2025-24224

Apple OS Remote Attacker Can Induce Unexpected System Termination

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to cause unexpected system termination.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os and 6 more

CVE-2025-31276

iOS/iPadOS Remote Image Loading Despite Disabled Setting

This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os

CVE-2025-43217

Inaccurate Microphone and Camera Privacy Indicator Display

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Privacy Indicators for microphone or camera access may not be correctly displayed.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os

CVE-2025-43186

Buffer Overflow in Apple's File Parsing Leading to Application Crash

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Parsing a file may lead to an unexpected app termination.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os and 7 more

CVE-2025-31254

Unexpected URL Redirection via Improper Validation in Safari and iOS

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ios Ipad Os Ipados and 2 more

CVE-2025-43203

Cache Handling Leading to Note Image Disclosure with Physical Access

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Ios Ipados Iphone Os