CVE Daily – Apple watchOS (High+Critical) https://cvedaily.com/pages/tags/watchos.html CVE Daily – Apple watchOS (High+Critical) en Wed, 03 Jun 2026 21:26:49 +0000 [High] CVE-2026-43668 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-43668 https://nvd.nist.gov/vuln/detail/CVE-2026-43668 Mon, 11 May 2026 21:19:02 +0000 High CVE-2026-43668

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-43661 – A buffer overflow issue was addressed with improved memory handling. This issue ... https://nvd.nist.gov/vuln/detail/CVE-2026-43661 https://nvd.nist.gov/vuln/detail/CVE-2026-43661 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43661

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

CVSS: 7.5 · CWE: CWE-121

View on NVD

]]> [High] CVE-2026-43660 – A validation issue was addressed with improved logic. This issue is fixed in Saf... https://nvd.nist.gov/vuln/detail/CVE-2026-43660 https://nvd.nist.gov/vuln/detail/CVE-2026-43660 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43660

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVSS: 7.5 · CWE: CWE-693

View on NVD

]]> [High] CVE-2026-43658 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-43658 https://nvd.nist.gov/vuln/detail/CVE-2026-43658 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43658

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-43655 – An out-of-bounds read was addressed with improved bounds checking. This issue is... https://nvd.nist.gov/vuln/detail/CVE-2026-43655 https://nvd.nist.gov/vuln/detail/CVE-2026-43655 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43655

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination or read kernel memory.

CVSS: 7.3 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-43654 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-43654 https://nvd.nist.gov/vuln/detail/CVE-2026-43654 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43654

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

CVSS: 7.5 · CWE: CWE-497

View on NVD

]]> [High] CVE-2026-28995 – A logic issue was addressed with improved restrictions. This issue is fixed in i... https://nvd.nist.gov/vuln/detail/CVE-2026-28995 https://nvd.nist.gov/vuln/detail/CVE-2026-28995 Mon, 11 May 2026 21:18:59 +0000 High CVE-2026-28995

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A malicious app may be able to break out of its sandbox.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2026-28991 – An out-of-bounds read was addressed with improved bounds checking. This issue is... https://nvd.nist.gov/vuln/detail/CVE-2026-28991 https://nvd.nist.gov/vuln/detail/CVE-2026-28991 Mon, 11 May 2026 21:18:59 +0000 High CVE-2026-28991

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-28990 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-28990 https://nvd.nist.gov/vuln/detail/CVE-2026-28990 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28990

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28987 – A logging issue was addressed with improved data redaction. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-28987 https://nvd.nist.gov/vuln/detail/CVE-2026-28987 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28987

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to leak sensitive kernel state.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [High] CVE-2026-28986 – A race condition was addressed with additional validation. This issue is fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-28986 https://nvd.nist.gov/vuln/detail/CVE-2026-28986 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28986

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-362

View on NVD

]]> [High] CVE-2026-28983 – A type confusion issue was addressed with improved checks. This issue is fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-28983 https://nvd.nist.gov/vuln/detail/CVE-2026-28983 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28983

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause a denial of service.

CVSS: 7.5 · CWE: CWE-843

View on NVD

]]> [High] CVE-2026-28974 – This issue was addressed with improved checks to prevent unauthorized actions. T... https://nvd.nist.gov/vuln/detail/CVE-2026-28974 https://nvd.nist.gov/vuln/detail/CVE-2026-28974 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28974

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service.

CVSS: 7.5 · CWE: CWE-284

View on NVD

]]> [High] CVE-2026-28969 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28969 https://nvd.nist.gov/vuln/detail/CVE-2026-28969 Mon, 11 May 2026 21:18:57 +0000 High CVE-2026-28969

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28959 – A buffer overflow was addressed with improved bounds checking. This issue is fix... https://nvd.nist.gov/vuln/detail/CVE-2026-28959 https://nvd.nist.gov/vuln/detail/CVE-2026-28959 Mon, 11 May 2026 21:18:56 +0000 High CVE-2026-28959

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2026-28955 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28955 https://nvd.nist.gov/vuln/detail/CVE-2026-28955 Mon, 11 May 2026 21:18:56 +0000 High CVE-2026-28955

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28953 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28953 https://nvd.nist.gov/vuln/detail/CVE-2026-28953 Mon, 11 May 2026 21:18:56 +0000 High CVE-2026-28953

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28947 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28947 https://nvd.nist.gov/vuln/detail/CVE-2026-28947 Mon, 11 May 2026 21:18:55 +0000 High CVE-2026-28947

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28943 – A logging issue was addressed with improved data redaction. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-28943 https://nvd.nist.gov/vuln/detail/CVE-2026-28943 Mon, 11 May 2026 21:18:55 +0000 High CVE-2026-28943

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to determine kernel memory layout.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [High] CVE-2026-28913 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28913 https://nvd.nist.gov/vuln/detail/CVE-2026-28913 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28913

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28907 – The issue was addressed with improved input validation. This issue is fixed in S... https://nvd.nist.gov/vuln/detail/CVE-2026-28907 https://nvd.nist.gov/vuln/detail/CVE-2026-28907 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28907

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVSS: 8.1 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-28904 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28904 https://nvd.nist.gov/vuln/detail/CVE-2026-28904 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28904

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28883 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28883 https://nvd.nist.gov/vuln/detail/CVE-2026-28883 Mon, 11 May 2026 21:18:52 +0000 High CVE-2026-28883

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28860 – The issue was addressed with improved input validation. This issue is fixed in i... https://nvd.nist.gov/vuln/detail/CVE-2026-28860 https://nvd.nist.gov/vuln/detail/CVE-2026-28860 Mon, 11 May 2026 21:18:51 +0000 High CVE-2026-28860

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A local attacker may be able to modify the state of the Keychain.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-28847 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28847 https://nvd.nist.gov/vuln/detail/CVE-2026-28847 Mon, 11 May 2026 21:18:51 +0000 High CVE-2026-28847

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28846 – A buffer overflow was addressed with improved bounds checking. This issue is fix... https://nvd.nist.gov/vuln/detail/CVE-2026-28846 https://nvd.nist.gov/vuln/detail/CVE-2026-28846 Mon, 11 May 2026 21:18:51 +0000 High CVE-2026-28846

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected app termination.

CVSS: 7.5 · CWE: CWE-121

View on NVD

]]> [High] CVE-2026-28865 – An authentication issue was addressed with improved state management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28865 https://nvd.nist.gov/vuln/detail/CVE-2026-28865 Wed, 25 Mar 2026 01:17:10 +0000 High CVE-2026-28865

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker in a privileged network position may be able to intercept network traffic.

CVSS: 7.5 · CWE: CWE-285

View on NVD

]]> [High] CVE-2026-20698 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-20698 https://nvd.nist.gov/vuln/detail/CVE-2026-20698 Wed, 25 Mar 2026 01:17:06 +0000 High CVE-2026-20698

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-20687 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-20687 https://nvd.nist.gov/vuln/detail/CVE-2026-20687 Wed, 25 Mar 2026 01:17:05 +0000 High CVE-2026-20687

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or write kernel memory.

CVSS: 7.1 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-20700 – A memory corruption issue was addressed with improved state management. This iss... https://nvd.nist.gov/vuln/detail/CVE-2026-20700 https://nvd.nist.gov/vuln/detail/CVE-2026-20700 Wed, 11 Feb 2026 23:16:10 +0000 High CVE-2026-20700

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individual…

CVSS: 7.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-20667 – A logic issue was addressed with improved checks. This issue is fixed in iOS 26... https://nvd.nist.gov/vuln/detail/CVE-2026-20667 https://nvd.nist.gov/vuln/detail/CVE-2026-20667 Wed, 11 Feb 2026 23:16:09 +0000 High CVE-2026-20667

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app may be able to break out of its sandbox.

CVSS: 8.8 · CWE: CWE-693

View on NVD

]]> [High] CVE-2026-20650 – A denial-of-service issue was addressed with improved validation. This issue is ... https://nvd.nist.gov/vuln/detail/CVE-2026-20650 https://nvd.nist.gov/vuln/detail/CVE-2026-20650 Wed, 11 Feb 2026 23:16:07 +0000 High CVE-2026-20650

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2026-20649 – A logging issue was addressed with improved data redaction. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-20649 https://nvd.nist.gov/vuln/detail/CVE-2026-20649 Wed, 11 Feb 2026 23:16:07 +0000 High CVE-2026-20649

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view sensitive user information.

CVSS: 7.5 · CWE: CWE-377

View on NVD

]]> [High] CVE-2026-20641 – A privacy issue was addressed with improved checks. This issue is fixed in iOS 1... https://nvd.nist.gov/vuln/detail/CVE-2026-20641 https://nvd.nist.gov/vuln/detail/CVE-2026-20641 Wed, 11 Feb 2026 23:16:07 +0000 High CVE-2026-20641

A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to identify what other apps a user has installed.

CVSS: 7.1 · CWE: CWE-200

View on NVD

]]> [High] CVE-2026-20628 – A permissions issue was addressed with additional restrictions. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2026-20628 https://nvd.nist.gov/vuln/detail/CVE-2026-20628 Wed, 11 Feb 2026 23:16:06 +0000 High CVE-2026-20628

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox.

CVSS: 7.1 · CWE: CWE-284

View on NVD

]]> [High] CVE-2026-20617 – A race condition was addressed with improved state handling. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2026-20617 https://nvd.nist.gov/vuln/detail/CVE-2026-20617 Wed, 11 Feb 2026 23:16:05 +0000 High CVE-2026-20617

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to gain root privileges.

CVSS: 7.0 · CWE: CWE-362

View on NVD

]]> [High] CVE-2026-20611 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2026-20611 https://nvd.nist.gov/vuln/detail/CVE-2026-20611 Wed, 11 Feb 2026 23:16:04 +0000 High CVE-2026-20611

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS: 7.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2025-46290 – A logic issue was addressed with improved checks. This issue is fixed in iOS 18... https://nvd.nist.gov/vuln/detail/CVE-2025-46290 https://nvd.nist.gov/vuln/detail/CVE-2025-46290 Wed, 11 Feb 2026 23:16:02 +0000 High CVE-2025-46290

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. A remote attacker may be able to cause a denial-of-service.

CVSS: 7.5 · CWE: CWE-693

View on NVD

]]> [High] CVE-2025-43529 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2025-43529 https://nvd.nist.gov/vuln/detail/CVE-2025-43529 Wed, 17 Dec 2025 21:16:11 +0000 High CVE-2025-43529

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated a…

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2025-46285 – An integer overflow was addressed by adopting 64-bit timestamps. This issue is f... https://nvd.nist.gov/vuln/detail/CVE-2025-46285 https://nvd.nist.gov/vuln/detail/CVE-2025-46285 Fri, 12 Dec 2025 21:15:57 +0000 High CVE-2025-46285

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.

CVSS: 7.8 · CWE: CWE-190

View on NVD

]]> [High] CVE-2025-43539 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-43539 https://nvd.nist.gov/vuln/detail/CVE-2025-43539 Fri, 12 Dec 2025 21:15:57 +0000 High CVE-2025-43539

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2025-43510 – A memory corruption issue was addressed with improved lock state checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-43510 https://nvd.nist.gov/vuln/detail/CVE-2025-43510 Fri, 12 Dec 2025 21:15:55 +0000 High CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

CVSS: 7.8 · CWE: CWE-667

View on NVD

]]> [High] CVE-2025-43494 – A mail header parsing issue was addressed with improved checks. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2025-43494 https://nvd.nist.gov/vuln/detail/CVE-2025-43494 Fri, 12 Dec 2025 21:15:55 +0000 High CVE-2025-43494

A mail header parsing issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An attacker may be able to cause a persistent denial-of-service.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-43500 – A privacy issue was addressed with improved handling of user preferences. This i... https://nvd.nist.gov/vuln/detail/CVE-2025-43500 https://nvd.nist.gov/vuln/detail/CVE-2025-43500 Tue, 04 Nov 2025 02:15:53 +0000 High CVE-2025-43500

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access sensitive user data.

CVSS: 7.5 · CWE: CWE-359

View on NVD

]]> [High] CVE-2025-43496 – The issue was addressed by adding additional logic. This issue is fixed in iOS 1... https://nvd.nist.gov/vuln/detail/CVE-2025-43496 https://nvd.nist.gov/vuln/detail/CVE-2025-43496 Tue, 04 Nov 2025 02:15:52 +0000 High CVE-2025-43496

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.

CVSS: 7.5 · CWE: CWE-359

View on NVD

]]> [High] CVE-2025-43480 – The issue was addressed with improved checks. This issue is fixed in Safari 26.1... https://nvd.nist.gov/vuln/detail/CVE-2025-43480 https://nvd.nist.gov/vuln/detail/CVE-2025-43480 Tue, 04 Nov 2025 02:15:52 +0000 High CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

CVSS: 8.1 · CWE: CWE-942

View on NVD

]]> [High] CVE-2025-43462 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-43462 https://nvd.nist.gov/vuln/detail/CVE-2025-43462 Tue, 04 Nov 2025 02:15:51 +0000 High CVE-2025-43462

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2025-43436 – A permissions issue was addressed with additional restrictions. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2025-43436 https://nvd.nist.gov/vuln/detail/CVE-2025-43436 Tue, 04 Nov 2025 02:15:49 +0000 High CVE-2025-43436

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps.

CVSS: 7.5 · CWE: CWE-288

View on NVD

]]> [High] CVE-2025-43433 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-43433 https://nvd.nist.gov/vuln/detail/CVE-2025-43433 Tue, 04 Nov 2025 02:15:49 +0000 High CVE-2025-43433

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2025-43431 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-43431 https://nvd.nist.gov/vuln/detail/CVE-2025-43431 Tue, 04 Nov 2025 02:15:48 +0000 High CVE-2025-43431

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2025-43419 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-43419 https://nvd.nist.gov/vuln/detail/CVE-2025-43419 Tue, 04 Nov 2025 02:15:47 +0000 High CVE-2025-43419

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-43413 – An access issue was addressed with additional sandbox restrictions. This issue i... https://nvd.nist.gov/vuln/detail/CVE-2025-43413 https://nvd.nist.gov/vuln/detail/CVE-2025-43413 Tue, 04 Nov 2025 02:15:47 +0000 High CVE-2025-43413

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe system-wide network connections.

CVSS: 7.5 · CWE: CWE-284

View on NVD

]]> [High] CVE-2025-43376 – A logic issue was addressed with improved state management. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2025-43376 https://nvd.nist.gov/vuln/detail/CVE-2025-43376 Tue, 04 Nov 2025 02:15:44 +0000 High CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2025-43361 – An out-of-bounds read was addressed with improved bounds checking. This issue is... https://nvd.nist.gov/vuln/detail/CVE-2025-43361 https://nvd.nist.gov/vuln/detail/CVE-2025-43361 Tue, 04 Nov 2025 02:15:43 +0000 High CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory.

CVSS: 7.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2025-43323 – This issue was addressed with additional entitlement checks. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2025-43323 https://nvd.nist.gov/vuln/detail/CVE-2025-43323 Tue, 04 Nov 2025 02:15:39 +0000 High CVE-2025-43323

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user.

CVSS: 8.1 · CWE: CWE-200

View on NVD

]]> [High] CVE-2025-43372 – The issue was addressed with improved input validation. This issue is fixed in i... https://nvd.nist.gov/vuln/detail/CVE-2025-43372 https://nvd.nist.gov/vuln/detail/CVE-2025-43372 Mon, 15 Sep 2025 23:15:38 +0000 High CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2025-43359 – A logic issue was addressed with improved state management. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2025-43359 https://nvd.nist.gov/vuln/detail/CVE-2025-43359 Mon, 15 Sep 2025 23:15:37 +0000 Critical CVE-2025-43359

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A UDP server socket bound to a local interface may become bound to all interfaces.

CVSS: 9.8 · CWE: CWE-670

View on NVD

]]> [Critical] CVE-2025-43347 – This issue was addressed by removing the vulnerable code. This issue is fixed in... https://nvd.nist.gov/vuln/detail/CVE-2025-43347 https://nvd.nist.gov/vuln/detail/CVE-2025-43347 Mon, 15 Sep 2025 23:15:36 +0000 Critical CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An input validation issue was addressed.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2025-43343 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-43343 https://nvd.nist.gov/vuln/detail/CVE-2025-43343 Mon, 15 Sep 2025 23:15:36 +0000 Critical CVE-2025-43343

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2025-43342 – A correctness issue was addressed with improved checks. This issue is fixed in S... https://nvd.nist.gov/vuln/detail/CVE-2025-43342 https://nvd.nist.gov/vuln/detail/CVE-2025-43342 Mon, 15 Sep 2025 23:15:36 +0000 Critical CVE-2025-43342

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-43329 – A permissions issue was addressed with additional restrictions. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2025-43329 https://nvd.nist.gov/vuln/detail/CVE-2025-43329 Mon, 15 Sep 2025 23:15:35 +0000 High CVE-2025-43329

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to break out of its sandbox.

CVSS: 8.8 · CWE: CWE-862

View on NVD

]]> [Critical] CVE-2025-31255 – An authorization issue was addressed with improved state management. This issue ... https://nvd.nist.gov/vuln/detail/CVE-2025-31255 https://nvd.nist.gov/vuln/detail/CVE-2025-31255 Mon, 15 Sep 2025 23:15:29 +0000 Critical CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data.

CVSS: 9.8 · CWE: CWE-285

View on NVD

]]> [High] CVE-2025-43277 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-43277 https://nvd.nist.gov/vuln/detail/CVE-2025-43277 Wed, 30 Jul 2025 00:15:38 +0000 High CVE-2025-43277

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.8, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted audio file may lead to memory corruption.

CVSS: 7.8 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2025-43234 – Multiple memory corruption issues were addressed with improved input validation... https://nvd.nist.gov/vuln/detail/CVE-2025-43234 https://nvd.nist.gov/vuln/detail/CVE-2025-43234 Wed, 30 Jul 2025 00:15:35 +0000 Critical CVE-2025-43234

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted texture may lead to unexpected app termination.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-43227 – This issue was addressed through improved state management. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2025-43227 https://nvd.nist.gov/vuln/detail/CVE-2025-43227 Wed, 30 Jul 2025 00:15:34 +0000 High CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information.

CVSS: 7.5 · CWE: CWE-359

View on NVD

]]> [High] CVE-2025-43223 – A denial-of-service issue was addressed with improved input validation. This iss... https://nvd.nist.gov/vuln/detail/CVE-2025-43223 https://nvd.nist.gov/vuln/detail/CVE-2025-43223 Wed, 30 Jul 2025 00:15:34 +0000 High CVE-2025-43223

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. A non-privileged user may be able to modify restricted network settings.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2025-43209 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-43209 https://nvd.nist.gov/vuln/detail/CVE-2025-43209 Wed, 30 Jul 2025 00:15:33 +0000 Critical CVE-2025-43209

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [Critical] CVE-2025-43186 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-43186 https://nvd.nist.gov/vuln/detail/CVE-2025-43186 Wed, 30 Jul 2025 00:15:31 +0000 Critical CVE-2025-43186

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Parsing a file may lead to an unexpected app termination.

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31278 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-31278 https://nvd.nist.gov/vuln/detail/CVE-2025-31278 Wed, 30 Jul 2025 00:15:30 +0000 High CVE-2025-31278

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31277 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-31277 https://nvd.nist.gov/vuln/detail/CVE-2025-31277 Wed, 30 Jul 2025 00:15:30 +0000 High CVE-2025-31277

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31273 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-31273 https://nvd.nist.gov/vuln/detail/CVE-2025-31273 Wed, 30 Jul 2025 00:15:30 +0000 High CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-24224 – The issue was addressed with improved checks. This issue is fixed in iOS 18.5 an... https://nvd.nist.gov/vuln/detail/CVE-2025-24224 https://nvd.nist.gov/vuln/detail/CVE-2025-24224 Wed, 30 Jul 2025 00:15:30 +0000 High CVE-2025-24224

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2025-24189 – The issue was addressed with improved checks. This issue is fixed in Safari 18.3... https://nvd.nist.gov/vuln/detail/CVE-2025-24189 https://nvd.nist.gov/vuln/detail/CVE-2025-24189 Mon, 19 May 2025 16:15:28 +0000 High CVE-2025-24189

The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31238 – The issue was addressed with improved checks. This issue is fixed in Safari 18.5... https://nvd.nist.gov/vuln/detail/CVE-2025-31238 https://nvd.nist.gov/vuln/detail/CVE-2025-31238 Mon, 12 May 2025 22:15:24 +0000 High CVE-2025-31238

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 7.3 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31223 – The issue was addressed with improved checks. This issue is fixed in Safari 18.5... https://nvd.nist.gov/vuln/detail/CVE-2025-31223 https://nvd.nist.gov/vuln/detail/CVE-2025-31223 Mon, 12 May 2025 22:15:23 +0000 High CVE-2025-31223

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.0 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31222 – A correctness issue was addressed with improved checks. This issue is fixed in i... https://nvd.nist.gov/vuln/detail/CVE-2025-31222 https://nvd.nist.gov/vuln/detail/CVE-2025-31222 Mon, 12 May 2025 22:15:22 +0000 High CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A user may be able to elevate privileges.

CVSS: 7.8 · CWE: CWE-269

View on NVD

]]> [High] CVE-2025-31221 – An integer overflow was addressed with improved input validation. This issue is ... https://nvd.nist.gov/vuln/detail/CVE-2025-31221 https://nvd.nist.gov/vuln/detail/CVE-2025-31221 Mon, 12 May 2025 22:15:22 +0000 High CVE-2025-31221

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to leak memory.

CVSS: 7.5 · CWE: CWE-190

View on NVD

]]> [High] CVE-2025-31219 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-31219 https://nvd.nist.gov/vuln/detail/CVE-2025-31219 Mon, 12 May 2025 22:15:22 +0000 High CVE-2025-31219

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.1 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-31208 – The issue was addressed with improved checks. This issue is fixed in iOS 18.5 an... https://nvd.nist.gov/vuln/detail/CVE-2025-31208 https://nvd.nist.gov/vuln/detail/CVE-2025-31208 Mon, 12 May 2025 22:15:21 +0000 High CVE-2025-31208

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to an unexpected app termination.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-31204 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-31204 https://nvd.nist.gov/vuln/detail/CVE-2025-31204 Mon, 12 May 2025 22:15:21 +0000 High CVE-2025-31204

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2025-24223 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-24223 https://nvd.nist.gov/vuln/detail/CVE-2025-24223 Mon, 12 May 2025 22:15:20 +0000 High CVE-2025-24223

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

CVSS: 8.0 · CWE: CWE-352

View on NVD

]]> [Critical] CVE-2025-31200 – A memory corruption issue was addressed with improved bounds checking. This issu... https://nvd.nist.gov/vuln/detail/CVE-2025-31200 https://nvd.nist.gov/vuln/detail/CVE-2025-31200 Wed, 16 Apr 2025 19:15:54 +0000 Critical CVE-2025-31200

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against speci…

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2023-42970 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2023-42970 https://nvd.nist.gov/vuln/detail/CVE-2023-42970 Fri, 11 Apr 2025 15:15:45 +0000 High CVE-2023-42970

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2023-42875 – Processing web content may lead to arbitrary code execution. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2023-42875 https://nvd.nist.gov/vuln/detail/CVE-2023-42875 Fri, 11 Apr 2025 15:15:44 +0000 High CVE-2023-42875

Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The issue was addressed with improved memory handling.

CVSS: 7.3 · CWE: CWE-94

View on NVD

]]> [Critical] CVE-2025-31183 – The issue was addressed with improved restriction of data container access. This... https://nvd.nist.gov/vuln/detail/CVE-2025-31183 https://nvd.nist.gov/vuln/detail/CVE-2025-31183 Mon, 31 Mar 2025 23:15:28 +0000 Critical CVE-2025-31183

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.

CVSS: 9.8 · CWE: CWE-200

View on NVD

]]> [Critical] CVE-2025-31182 – This issue was addressed with improved handling of symlinks. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2025-31182 https://nvd.nist.gov/vuln/detail/CVE-2025-31182 Mon, 31 Mar 2025 23:15:28 +0000 Critical CVE-2025-31182

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to delete files for which it does not have permission.

CVSS: 9.8 · CWE: CWE-862

View on NVD

]]> [High] CVE-2025-30471 – A validation issue was addressed with improved logic. This issue is fixed in iOS... https://nvd.nist.gov/vuln/detail/CVE-2025-30471 https://nvd.nist.gov/vuln/detail/CVE-2025-30471 Mon, 31 Mar 2025 23:15:28 +0000 High CVE-2025-30471

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. A remote user may be able to cause a denial-of-service.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2025-30433 – This issue was addressed with improved access restrictions. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2025-30433 https://nvd.nist.gov/vuln/detail/CVE-2025-30433 Mon, 31 Mar 2025 23:15:25 +0000 Critical CVE-2025-30433

This issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

CVSS: 9.8 · CWE: CWE-284

View on NVD

]]> [Critical] CVE-2025-30430 – This issue was addressed through improved state management. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2025-30430 https://nvd.nist.gov/vuln/detail/CVE-2025-30430 Mon, 31 Mar 2025 23:15:25 +0000 Critical CVE-2025-30430

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Password autofill may fill in passwords after failing authentication.

CVSS: 9.8 · CWE: CWE-287

View on NVD

]]> [Critical] CVE-2025-30426 – This issue was addressed with additional entitlement checks. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2025-30426 https://nvd.nist.gov/vuln/detail/CVE-2025-30426 Mon, 31 Mar 2025 23:15:24 +0000 Critical CVE-2025-30426

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to enumerate a user's installed apps.

CVSS: 9.8 · CWE: CWE-200

View on NVD

]]> [Critical] CVE-2025-24264 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-24264 https://nvd.nist.gov/vuln/detail/CVE-2025-24264 Mon, 31 Mar 2025 23:15:23 +0000 Critical CVE-2025-24264

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 9.8 · CWE: CWE-400

View on NVD

]]> [High] CVE-2025-24257 – An out-of-bounds write issue was addressed with improved input validation. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-24257 https://nvd.nist.gov/vuln/detail/CVE-2025-24257 Mon, 31 Mar 2025 23:15:22 +0000 High CVE-2025-24257

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination or write kernel memory.

CVSS: 7.1 · CWE: CWE-787

View on NVD

]]> [High] CVE-2025-24243 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-24243 https://nvd.nist.gov/vuln/detail/CVE-2025-24243 Mon, 31 Mar 2025 23:15:21 +0000 High CVE-2025-24243

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to arbitrary code execution.

CVSS: 7.8 · CWE: CWE-94

View on NVD

]]> [Critical] CVE-2025-24238 – A logic issue was addressed with improved checks. This issue is fixed in iOS 18... https://nvd.nist.gov/vuln/detail/CVE-2025-24238 https://nvd.nist.gov/vuln/detail/CVE-2025-24238 Mon, 31 Mar 2025 23:15:21 +0000 Critical CVE-2025-24238

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges.

CVSS: 9.8 · CWE: CWE-276

View on NVD

]]> [Critical] CVE-2025-24237 – A buffer overflow was addressed with improved bounds checking. This issue is fix... https://nvd.nist.gov/vuln/detail/CVE-2025-24237 https://nvd.nist.gov/vuln/detail/CVE-2025-24237 Mon, 31 Mar 2025 23:15:20 +0000 Critical CVE-2025-24237

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination.

CVSS: 9.8 · CWE: CWE-120

View on NVD

]]> [Critical] CVE-2025-24230 – An out-of-bounds read issue was addressed with improved input validation. This i... https://nvd.nist.gov/vuln/detail/CVE-2025-24230 https://nvd.nist.gov/vuln/detail/CVE-2025-24230 Mon, 31 Mar 2025 23:15:20 +0000 Critical CVE-2025-24230

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Playing a malicious audio file may lead to an unexpected app termination.

CVSS: 9.8 · CWE: CWE-125

View on NVD

]]> [High] CVE-2025-24213 – This issue was addressed with improved handling of floats. This issue is fixed i... https://nvd.nist.gov/vuln/detail/CVE-2025-24213 https://nvd.nist.gov/vuln/detail/CVE-2025-24213 Mon, 31 Mar 2025 23:15:19 +0000 High CVE-2025-24213

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption.

CVSS: 7.8 · CWE: CWE-843

View on NVD

]]> [High] CVE-2025-24209 – A buffer overflow issue was addressed with improved memory handling. This issue ... https://nvd.nist.gov/vuln/detail/CVE-2025-24209 https://nvd.nist.gov/vuln/detail/CVE-2025-24209 Mon, 31 Mar 2025 23:15:18 +0000 High CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.0 · CWE: CWE-120

View on NVD

]]> [Critical] CVE-2025-24190 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-24190 https://nvd.nist.gov/vuln/detail/CVE-2025-24190 Mon, 31 Mar 2025 23:15:17 +0000 Critical CVE-2025-24190

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

CVSS: 9.8 · CWE: CWE-400

View on NVD

]]> [High] CVE-2025-24180 – The issue was addressed with improved input validation. This issue is fixed in S... https://nvd.nist.gov/vuln/detail/CVE-2025-24180 https://nvd.nist.gov/vuln/detail/CVE-2025-24180 Mon, 31 Mar 2025 23:15:17 +0000 High CVE-2025-24180

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

CVSS: 8.1 · CWE: CWE-601

View on NVD

]]>