← Back

Macos

macos

Vendor: Apple • 3,171 CVEs

CVEs (3,171)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-24202
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVE-2025-24199
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause a denial-of-service.
CVE-2025-24198
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Mar 31, 2025
N/A· v4
6.6 MEDIUM· v3
N/A· v2
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with...Show more
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.Show less
CVE-2025-24196
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privileges may be able to read kernel memory.
CVE-2025-24195
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.
CVE-2025-24194
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may result in the d...Show more
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may result in the disclosure of process memory.Show less
CVE-2025-24192
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. Visiting a website may leak sensitive data.
CVE-2025-24191
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system.
CVE-2025-24190
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4....Show more
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.Show less
CVE-2025-24182
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font...Show more
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.Show less
CVE-2025-24181
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.
CVE-2025-24180
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn cred...Show more
The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.Show less
CVE-2025-24178
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app m...Show more
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox.Show less
CVE-2025-24173
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS...Show more
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.Show less
CVE-2025-24172
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "Block All Remote Content" may not apply for all mail previews...Show more
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "Block All Remote Content" may not apply for all mail previews.Show less
CVE-2025-24170
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
CVE-2025-24164
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
CVE-2025-24157
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.6 MEDIUM· v3
N/A· v2
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination or corr...Show more
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.Show less
CVE-2025-24148
1Apple
1Macos
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious JAR file may bypass Gatekeeper checks.
CVE-2025-24097
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Mar 31, 2025
N/A· v4
5.0 MEDIUM· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read...Show more
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata.Show less